REDHAT-BUG-648882: Medium severity red hat certificate system vulnerability
Red Hat / Dogtag Certificate System's Certificate Authority can be asked to decrypt one-time PIN used in the SCEP (Simple Certificate Enrollment Protocol) protocol requests. This feature is intended to be used by Registration Authorities that act as proxies between CA users (e.g. network devices enrolling using SCEP protocol) and CA itself. However, Red Hat Certificate System lacked proper authentication mechanisms to ensure such decryption requests are only replied if sent form the configured Registration Authority. An attacker able to sniff SCEP request of the network could use this flaw to request decryption of the sniffed request and obtain one-time PIN.
Red Hat Certificate System updates add proper authentication, only configured authenticated Registration Authorities can request SCEP one-time PIN decryption.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-648882?
The severity of REDHAT-BUG-648882 is considered high due to the potential exposure of sensitive information.
How do I fix REDHAT-BUG-648882?
To fix REDHAT-BUG-648882, update your Red Hat Dogtag Certificate System to the latest patched version.
What systems are affected by REDHAT-BUG-648882?
REDHAT-BUG-648882 affects the Red Hat Dogtag Certificate System specifically when handling SCEP protocol requests.
What vulnerabilities does REDHAT-BUG-648882 introduce?
REDHAT-BUG-648882 introduces the risk of unauthorized decryption of one-time PINs used in secure communications.
Is there a workaround for REDHAT-BUG-648882?
A temporary workaround for REDHAT-BUG-648882 is to limit access to the Certificate Authority until a patch is applied.