Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2010-11-17	CVE-2010-3868	Improper Authentication vulnerability in Redhat Certificate System and Dogtag Certificate System Red Hat Certificate System (RHCS) 7.3 and 8 and Dogtag Certificate System do not require authentication for requests to decrypt SCEP one-time PINs, which allows remote attackers to obtain PINs by sniffing the network for SCEP requests and then sending decryption requests to the Certificate Authority component. network redhat CWE-287	5.8
2009-05-27	CVE-2009-0588	Unspecified vulnerability in Redhat Certificate System and Dogtag Certificate System agent/request/op.cgi in the Registration Authority (RA) component in Red Hat Certificate System (RHCS) 7.3 and Dogtag Certificate System allows remote authenticated users to approve certificate requests queued for arbitrary agent groups via a modified request ID field. network low complexity redhat	6.5
2009-01-30	CVE-2008-5082	Improper Authentication vulnerability in Redhat Dogtag Certificate System and Certificate System The verifyProof function in the Token Processing System (TPS) component in Red Hat Certificate System (RHCS) 7.1 through 7.3 and Dogtag Certificate System 1.0 returns successfully even when token enrollment did not use the hardware key, which allows remote authenticated users with enrollment privileges to bypass intended authentication policies by performing enrollment with a software key. network redhat CWE-287	6.0