CVE-2009-0588

Description

agent/request/op.cgi in the Registration Authority (RA) component in Red Hat Certificate System (RHCS) 7.3 and Dogtag Certificate System allows remote authenticated users to approve certificate requests queued for arbitrary agent groups via a modified request ID field.

References

https://bugzilla.redhat.com/show_bug.cgi?id=488706

https://bugzilla.redhat.com/show_bug.cgi?id=484828

http://www.securitytracker.com/id?1022278

http://www.securityfocus.com/bid/35104

http://www.redhat.com/support/errata/RHSA-2009-1065.html

http://secunia.com/advisories/35263

http://secunia.com/advisories/35242

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS