Total vulnerabilities in the database
Red Hat Certificate System (RHCS) 7.3 and 8 and Dogtag Certificate System do not require authentication for requests to decrypt SCEP one-time PINs, which allows remote attackers to obtain PINs by sniffing the network for SCEP requests and then sending decryption requests to the Certificate Authority component.
| Software | From | Fixed in |
|---|---|---|
| redhat / certificate_system | 7.3 | 7.3.x |
| redhat / certificate_system | 8 | 8.x |
| redhat / dogtag_certificate_system | - | - |