CVE-2009-0588

Severity: medium (CVSS 6.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2009-05-27 · updated 2026-06-16

Description

agent/request/op.cgi in the Registration Authority (RA) component in Red Hat Certificate System (RHCS) 7.3 and Dogtag Certificate System allows remote authenticated users to approve certificate requests queued for arbitrary agent groups via a modified request ID field.

Affected products

Red Hat Certificate System: 7.3
RedHat Dogtag Certificate System: all versions

References

http://secunia.com/advisories/35242
http://secunia.com/advisories/35263
http://www.redhat.com/support/errata/RHSA-2009-1065.html
http://www.securityfocus.com/bid/35104
http://www.securitytracker.com/id?1022278
https://bugzilla.redhat.com/show_bug.cgi?id=484828
https://bugzilla.redhat.com/show_bug.cgi?id=488706
http://secunia.com/advisories/35242
http://secunia.com/advisories/35263
http://www.redhat.com/support/errata/RHSA-2009-1065.html
http://www.securityfocus.com/bid/35104
http://www.securitytracker.com/id?1022278

Get alerted when CVE-2009-0588 or the next vulnerability affects your stack