Certificate System
Approved changes feed: RSS · Atom
cpe:2.3:a:redhat:certificate_system:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Redhat (e942785a-ca89-506e-bd99-50782639cde3) |
|---|---|
| Product | Certificate System (b4920ad9-7162-5871-b579-8ee5ea5b68a7) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2017-7509 |
vulnerable | 2026-06-08 05:09:56.306735 |
Details available
LOW (3.5)
An input validation error was found in Red Hat Certificate System's handling of client provided certificates before 8.1.20-1. If the certreq field is not present in a certificate an assertion error is triggered causing a denial of service.
Published: 2018-07-26T16:00:00.000Z
Updated: 2024-08-05T16:04:11.860Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-4556 |
vulnerable | 2026-06-08 05:02:51.478276 |
Details available
The token processing system (pki-tps) in Red Hat Certificate System (RHCS) before 8.1.3 allows remote attackers to cause a denial of service (Apache httpd web server child process restart) via certain unspecified empty search fields in a user certificate search query.
Published: 2013-01-04T22:00:00.000Z
Updated: 2024-08-06T20:42:55.164Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-4555 |
vulnerable | 2026-06-08 05:02:51.477846 |
Details available
The token processing system (pki-tps) in Red Hat Certificate System (RHCS) before 8.1.3 does not properly handle interruptions of token format operations, which allows remote attackers to cause a denial of service (NULL pointer dereference and Apache httpd web server child process crash) via unspecified vectors.
Published: 2013-01-04T22:00:00.000Z
Updated: 2024-08-06T20:42:54.969Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-4543 |
vulnerable | 2026-06-08 05:02:51.377642 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in Red Hat Certificate System (RHCS) before 8.1.3 allow remote attackers to inject arbitrary web script or HTML via the (1) pageStart or (2) pageSize to the displayCRL script, or (3) nonce variable to the profileProcess script.
Published: 2013-01-04T22:00:00.000Z
Updated: 2024-08-06T20:42:55.068Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-3367 |
vulnerable | 2026-06-08 05:02:09.385477 |
Details available
Red Hat Certificate System (RHCS) before 8.1.1 and Dogtag Certificate System does not properly check certificate revocation requests made through the web interface, which allows remote attackers with permissions to revoke end entity certificates to revoke the Certificate Authority (CA) certificate.
Published: 2012-08-13T20:00:00.000Z
Updated: 2024-08-06T20:05:12.335Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-2662 |
vulnerable | 2026-06-08 05:02:05.272676 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.