CVE-2010-3869: Medium severity red hat certificate system vulnerability
Red Hat / Dogtag Certificate System did not prevent re-use of the one-time PIN used in the SCEP (Simple Certificate Enrollment Protocol) protocol enrollment requests. The check was done to ensure that PIN is valid, but the PIN was never removed from the list of valid PINs once it was used. An attacker possessing a valid SCEP enrollment one-time PIN could use it to generate an unlimited number of certificates.
Other sources
Red Hat Certificate System (RHCS) 7.3 and 8 and Dogtag Certificate System allow remote authenticated users to generate an arbitrary number of certificates by replaying a single SCEP one-time PIN.
— MITRE
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-3869?
CVE-2010-3869 is considered a high severity vulnerability due to its potential to allow unauthorized access through the reuse of one-time PINs.
How do I fix CVE-2010-3869?
To address CVE-2010-3869, ensure that the one-time PINs are removed from the list of valid PINs immediately after use.
Which versions are affected by CVE-2010-3869?
CVE-2010-3869 affects Red Hat Certificate System versions 7.3 and 8, as well as Dogtag Certificate System.
What causes CVE-2010-3869?
CVE-2010-3869 is caused by the failure to invalidate one-time PINs after their initial use in the SCEP protocol.
What are the potential impacts of CVE-2010-3869?
The potential impacts of CVE-2010-3869 include unauthorized access to sensitive information due to the re-use of one-time PINs.