CVE-2010-3868

Severity: medium (CVSS 5.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2010-11-17 · updated 2026-06-16
Weakness: CWE-287

Description

Red Hat Certificate System (RHCS) 7.3 and 8 and Dogtag Certificate System do not require authentication for requests to decrypt SCEP one-time PINs, which allows remote attackers to obtain PINs by sniffing the network for SCEP requests and then sending decryption requests to the Certificate Authority component.

Affected products

Red Hat Certificate System: 7.3, 8
RedHat Dogtag Certificate System: all versions

References

http://secunia.com/advisories/42181
http://securitytracker.com/id?1024697
http://www.osvdb.org/69149
https://bugzilla.redhat.com/show_bug.cgi?id=648882
https://fedorahosted.org/pki/changeset/1261
https://rhn.redhat.com/errata/RHSA-2010-0837.html
https://rhn.redhat.com/errata/RHSA-2010-0838.html
http://secunia.com/advisories/42181
http://securitytracker.com/id?1024697
http://www.osvdb.org/69149
https://bugzilla.redhat.com/show_bug.cgi?id=648882
https://fedorahosted.org/pki/changeset/1261

Get alerted when CVE-2010-3868 or the next vulnerability affects your stack