CVE-2012-3367

Severity: medium (CVSS 5.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2012-08-13 · updated 2026-06-16
Weakness: CWE-310

Description

Red Hat Certificate System (RHCS) before 8.1.1 and Dogtag Certificate System does not properly check certificate revocation requests made through the web interface, which allows remote attackers with permissions to revoke end entity certificates to revoke the Certificate Authority (CA) certificate.

Affected products

Red Hat Certificate System: through 8.1; 7.1, 7.2, 7.3, 8, 8.0
RedHat Dogtag Certificate System: all versions

References

http://osvdb.org/84098
http://rhn.redhat.com/errata/RHSA-2012-1103.html
http://secunia.com/advisories/50013
http://www.securityfocus.com/bid/54608
http://www.securitytracker.com/id?1027284
https://bugzilla.redhat.com/show_bug.cgi?id=836268
https://exchange.xforce.ibmcloud.com/vulnerabilities/77102
https://fedorahosted.org/pki/changeset/2430
http://osvdb.org/84098
http://rhn.redhat.com/errata/RHSA-2012-1103.html
http://secunia.com/advisories/50013
http://www.securityfocus.com/bid/54608

Get alerted when CVE-2012-3367 or the next vulnerability affects your stack