CVE-2010-3869

Name of the Vulnerable Software and Affected Versions Red Hat Certificate System (RHCS) versions 7.3 and 8 Dogtag Certificate System (affected versions not specified)

Description The issue allows remote authenticated users to generate an arbitrary number of certificates by replaying a single SCEP one-time PIN.

Recommendations For Red Hat Certificate System (RHCS) versions 7.3 and 8, consider restricting access to the SCEP functionality until a fix is available. For Dogtag Certificate System, at the moment, there is no information about a newer version that contains a fix for this vulnerability.