Dogtag Certificate System
Approved changes feed: RSS · Atom
cpe:2.3:a:redhat:dogtag_certificate_system:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Redhat (e942785a-ca89-506e-bd99-50782639cde3) |
|---|---|
| Product | Dogtag Certificate System (b041d54f-fb42-5596-a0a7-d921eb4b5f8c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/dogtagpki/pki |
purl2cpe | 2026-06-01 10:12:52.884887 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2012-3367 |
vulnerable | 2026-06-08 05:02:09.385597 |
Details available
Red Hat Certificate System (RHCS) before 8.1.1 and Dogtag Certificate System does not properly check certificate revocation requests made through the web interface, which allows remote attackers with permissions to revoke end entity certificates to revoke the Certificate Authority (CA) certificate.
Published: 2012-08-13T20:00:00.000Z
Updated: 2024-08-06T20:05:12.335Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-2662 |
vulnerable | 2026-06-08 05:02:05.276945 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in Red Hat Certificate System (RHCS) before 8.1.1 and Dogtag Certificate System allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to the (1) System Agent or (2) End Entity pages.
Published: 2012-08-13T20:00:00.000Z
Updated: 2024-08-06T19:42:31.591Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-3869 |
vulnerable | 2026-06-08 04:55:17.686132 |
Details available
Red Hat Certificate System (RHCS) 7.3 and 8 and Dogtag Certificate System allow remote authenticated users to generate an arbitrary number of certificates by replaying a single SCEP one-time PIN.
Published: 2010-11-17T15:00:00.000Z
Updated: 2024-08-07T03:26:12.228Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-3868 |
vulnerable | 2026-06-08 04:55:17.685653 |
Details available
Red Hat Certificate System (RHCS) 7.3 and 8 and Dogtag Certificate System do not require authentication for requests to decrypt SCEP one-time PINs, which allows remote attackers to obtain PINs by sniffing the network for SCEP requests and then sending decryption requests to the Certificate Authority component.
Published: 2010-11-17T15:00:00.000Z
Updated: 2024-08-07T03:26:12.096Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-0588 |
vulnerable | 2026-06-08 04:51:10.181380 |
Details available
agent/request/op.cgi in the Registration Authority (RA) component in Red Hat Certificate System (RHCS) 7.3 and Dogtag Certificate System allows remote authenticated users to approve certificate requests queued for arbitrary agent groups via a modified request ID field.
Published: 2009-05-27T16:00:00.000Z
Updated: 2024-08-07T04:40:05.106Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.