CVE-2008-2368: redhat certificate_system Credentials Management Errors

EPSS trend

Probability

0.24%

Chance of exploitation in the next 30 days

Percentile

14%

Versus all other CVEs

30-day change

0.00 pp

From 0.24% on 19-09-2026

19-09-202619-10-2026

EPSS score

0.24%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

8 links

secunia.com/advisories/33540Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.vupen.com/english/advisories/2009/0145VDB EntryX Refsource VUPEN
www.securityfocus.com/bid/33288VDB EntryX Refsource BID
securitytracker.com/id?1021608VDB EntryX Refsource SECTRACK
rhn.redhat.com/errata/RHSA-2009-0006.htmlVendor AdvisoryX Refsource REDHAT
bugzilla.redhat.com/show_bug.cgi?id=452000X Refsource CONFIRM
rhn.redhat.com/errata/RHSA-2009-0007.htmlVendor AdvisoryX Refsource REDHAT
exchange.xforce.ibmcloud.com/vulnerabilities/48022VDB EntryX Refsource XF

Related vulnerabilities

CVE-2013-1885redhatcertificate_system+11.24%12y ago24-01-2014 16:00Multiple cross-site scripting (XSS) vulnerabilities in the token processing system (pki-tps) in Red Hat Certificate System (RHCS) 8.1 and possibly Dogtag Certificate System 9 and 10 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) tus/ or (2) tus/tus/.CVE-2013-1886redhatcertificate_system+12.22%12y ago24-01-2014 16:00Format string vulnerability in the token processing system (pki-tps) in Red Hat Certificate System (RHCS) 8.1 and possibly Dogtag Certificate System 9 and 10 allows remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in unspecified vectors, related to viewing certificates.CVE-2021-20179debiandogtag-pki+251.22%5y ago15-03-2021 12:01A flaw was found in pki-core. An attacker who has successfully compromised a key could use this flaw to renew the corresponding certificate over and over again, as long as it is not explicitly revoked. The highest threat from this vulnerability is to data confidentiality and integrity.CVE-2020-1696debiandogtag-pki+40.76%6y ago20-03-2020 13:58A flaw was found in the all pki-core 10.x.x versions, where Token Processing Service (TPS) where it did not properly sanitize Profile IDs, enabling a Stored Cross-Site Scripting (XSS) vulnerability when the profile ID is printed. An attacker with sufficient permissions could trick an authenticated victim into executing a specially crafted Javascript code.CVE-2008-2367redhatcertificate_system0.24%17y ago20-01-2009 16:00Red Hat Certificate System 7.2 uses world-readable permissions for password.conf and unspecified other configuration files, which allows local users to discover passwords by reading these files.CVE-2008-5082redhat_dogtag_certificate_system+10.78%17y ago30-01-2009 19:00The verifyProof function in the Token Processing System (TPS) component in Red Hat Certificate System (RHCS) 7.1 through 7.3 and Dogtag Certificate System 1.0 returns successfully even when token enrollment did not use the hardware key, which allows remote authenticated users with enrollment privileges to bypass intended authentication policies by performing enrollment with a software key.

All vulnerabilities incertificate_system

CVE-2008-2368: redhat certificate_system Credentials Management Errors

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References