Security Advisory

CVE-2017-7537

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-07-26 13:00:00

Last updated 2024-08-05 16:04:11

Assigner redhat

CVSS score 5.9

State PUBLISHED

Description

It was found that a mock CMC authentication plugin with a hardcoded secret was accidentally enabled by default in the pki-core package before 10.6.4. An attacker could potentially use this flaw to bypass the regular authentication process and trick the CA server into issuing certificates.

← Browse all CVEs View on cve.org ↗