CVE-2010-3868

no score yetEPSS 1.3%

Red Hat Certificate System (RHCS) 7.3 and 8 and Dogtag Certificate System do not require authentication for requests to decrypt SCEP one-time PINs, which allows remote attackers to obtain PINs by sniffing the network for SCEP requests and then sending decryption requests to the Certificate Authority component.

EPSS: 1.3% chance of exploitation in the next 30 days; higher than 70% of CVEs (scores of 2026-10-31)
CWE: CWE-287
Published: 2010-11-17
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

redhat:certificate_system
redhat:dogtag_certificate_system

References

http://secunia.com/advisories/42181
http://securitytracker.com/id?1024697
http://www.osvdb.org/69149
https://bugzilla.redhat.com/show_bug.cgi?id=648882
https://fedorahosted.org/pki/changeset/1261

Check your stack JSON