It was found that a mock CMC authentication plugin with a hardcoded secret was accidentally enabled by default in the pki-core package before 10.6.4. An attacker could potentially use this flaw to bypass the regular authentication process and trick the CA server into issuing certificates.

The remote Ubuntu 16.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7146-1 advisory.

    Christina Fu discovered that Dogtag PKI accidentally enabled a mock authentication plugin by default. An     attacker could potentially use this flaw to bypass the regular authentication process and trick the CA     server into issuing certificates. This issue only affected Ubuntu 16.04 LTS. (CVE-2017-7537)

    It was discovered that Dogtag PKI did not properly sanitize user input. An attacker could possibly use     this issue to perform cross site scripting and obtain sensitive information. This issue only affected     Ubuntu 22.04 LTS. (CVE-2020-25715)

    It was discovered that the XML parser did not properly handle entity expansion. A remote attacker could     potentially retrieve the content of arbitrary files by sending specially crafted HTTP requests. This issue     only affected Ubuntu 16.04 LTS. (CVE-2022-2414)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the version of the pki-core packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - It was found that a mock CMC authentication plugin with     a hardcoded secret was accidentally enabled by default     in the pki-core package. An attacker could potentially     use this flaw to bypass the regular authentication     process and trick the CA server into issuing     certificates. (CVE-2017-7537)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security Fix(es) :

  - It was found that a mock CMC authentication plugin with     a hard-coded secret was accidentally enabled by default     in the pki-core package. An attacker could potentially     use this flaw to bypass the regular authentication     process and trick the CA server into issuing     certificates. (CVE-2017-7537)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-2335 advisory.

    - Resolves CVE-2017-7537

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2017:2335 advisory.

    Red Hat Certificate System is an enterprise software system designed to manage enterprise public key     infrastructure (PKI) deployments. PKI Core contains fundamental packages required by Red Hat Certificate     System, which comprise the Certificate Authority (CA) subsystem.

    Security Fix(es):

    * It was found that a mock CMC authentication plugin with a hardcoded secret was accidentally enabled by     default in the pki-core package. An attacker could potentially use this flaw to bypass the regular     authentication process and trick the CA server into issuing certificates. (CVE-2017-7537)

    This issue was discovered by Christina Fu (Red Hat).

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
212215	Ubuntu 16.04 LTS / 22.04 LTS : Dogtag PKI vulnerabilities (USN-7146-1)	Nessus	Ubuntu Local Security Checks	high
103022	EulerOS 2.0 SP2 : pki-core (EulerOS-SA-2017-1184)	Nessus	Huawei Local Security Checks	high
103021	EulerOS 2.0 SP1 : pki-core (EulerOS-SA-2017-1183)	Nessus	Huawei Local Security Checks	high
102652	Scientific Linux Security Update : pki-core on SL7.x x86_64 (20170801)	Nessus	Scientific Linux Local Security Checks	high
102342	Oracle Linux 7 : pki-core (ELSA-2017-2335)	Nessus	Oracle Linux Local Security Checks	high
102117	RHEL 7 : pki-core (RHSA-2017:2335)	Nessus	Red Hat Local Security Checks	high

Detections

Analytics

CVE-2017-7537

high

Tenable Plugins

high

high

high

high

high

high