Vulnerabilities > CVE-2007-4994 - Credentials Management vulnerability in Redhat Certificate Server 7.2

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
redhat
CWE-255
NVD
Published: 2007-11-06
Updated: 2011-03-08

Summary

Certificate Server 7.2 in Red Hat Certificate System (RHCS) does not properly handle new revocations that occur while a Certificate Revocation List (CRL) is being generated, which might prevent certain revoked certificates from appearing on the CRL quickly and allow users with revoked certificates to bypass the intended CRL.

Vulnerable Configurations

Part Description Count
Application
Redhat
1

Common Weakness Enumeration (CWE)

Redhat

advisories
  • rhsa
    idRHSA-2007:0934
  • rhsa
    idRHSA-2008:0566
rpms
  • rhpki-ca-0:7.2.0-4
  • rhpki-common-0:7.2.0-8
  • rhpki-util-0:7.2.0-4
  • rhpki-ca-0:7.3.0-11.el4
  • rhpki-common-0:7.3.0-34.el4
  • rhpki-util-0:7.3.0-18.el4

References