CVE-2009-0588: redhat certificate_system

EPSS trend

Probability

1.31%

Chance of exploitation in the next 30 days

Percentile

70%

Versus all other CVEs

30-day change

0.00 pp

From 1.31% on 19-09-2026

19-09-202619-10-2026

EPSS score

1.31%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

13 links

bugzilla.redhat.com/show_bug.cgi?id=488706X Refsource CONFIRMREPORT
secunia.com/advisories/35263Third Party AdvisoryX Refsource SECUNIA
www.securitytracker.com/id?1022278VDB EntryX Refsource SECTRACK
www.securityfocus.com/bid/35104VDB EntryX Refsource BID
bugzilla.redhat.com/show_bug.cgi?id=484828X Refsource CONFIRMPatch
www.redhat.com/support/errata/RHSA-2009-1065.htmlVendor AdvisoryX Refsource REDHATPatch
secunia.com/advisories/35242Third Party AdvisoryX Refsource SECUNIA
access.redhat.com/errata/RHSA-2009:1065Advisory
www.redhat.com/security/updates/classification/ARTICLE
security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1065.jsonAdvisory

Show all 13 references

access.redhat.com/security/cve/CVE-2009-0588REPORT
www.cve.org/CVERecord?id=CVE-2009-0588Advisory
nvd.nist.gov/vuln/detail/CVE-2009-0588Advisory

Related vulnerabilities

CVE-2013-1885redhatcertificate_system+11.24%12y ago24-01-2014 16:00Multiple cross-site scripting (XSS) vulnerabilities in the token processing system (pki-tps) in Red Hat Certificate System (RHCS) 8.1 and possibly Dogtag Certificate System 9 and 10 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) tus/ or (2) tus/tus/.CVE-2013-1886redhatcertificate_system+12.22%12y ago24-01-2014 16:00Format string vulnerability in the token processing system (pki-tps) in Red Hat Certificate System (RHCS) 8.1 and possibly Dogtag Certificate System 9 and 10 allows remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in unspecified vectors, related to viewing certificates.CVE-2021-20179debiandogtag-pki+251.22%5y ago15-03-2021 12:01A flaw was found in pki-core. An attacker who has successfully compromised a key could use this flaw to renew the corresponding certificate over and over again, as long as it is not explicitly revoked. The highest threat from this vulnerability is to data confidentiality and integrity.CVE-2020-1696debiandogtag-pki+40.76%6y ago20-03-2020 13:58A flaw was found in the all pki-core 10.x.x versions, where Token Processing Service (TPS) where it did not properly sanitize Profile IDs, enabling a Stored Cross-Site Scripting (XSS) vulnerability when the profile ID is printed. An attacker with sufficient permissions could trick an authenticated victim into executing a specially crafted Javascript code.CVE-2008-2367redhatcertificate_system0.24%17y ago20-01-2009 16:00Red Hat Certificate System 7.2 uses world-readable permissions for password.conf and unspecified other configuration files, which allows local users to discover passwords by reading these files.CVE-2008-2368redhatcertificate_system0.24%17y ago20-01-2009 16:00Red Hat Certificate System 7.2 stores passwords in cleartext in the UserDirEnrollment log, the RA wizard installer log, and unspecified other debug log files, and uses weak permissions for these files, which allows local users to discover passwords by reading the files.

All vulnerabilities incertificate_system

CVE-2009-0588: redhat certificate_system

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References