Red Hat Certificate System Multiple Cross Site Scripting and Security Bypass Vulnerabilities
BID:54608
Info
Red Hat Certificate System Multiple Cross Site Scripting and Security Bypass Vulnerabilities
| Bugtraq ID: | 54608 |
| Class: | Unknown |
| CVE: |
CVE-2012-2662 CVE-2012-3367 |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 19 2012 12:00AM |
| Updated: | Aug 12 2015 10:11PM |
| Credit: | Red Hat |
| Vulnerable: |
Redhat Enterprise Linux Workstation Optional 6 Redhat Enterprise Linux Workstation 6 Redhat Enterprise Linux Server Optional 6 Redhat Enterprise Linux Server 6 Redhat Enterprise Linux HPC Node Optional 6 Redhat Enterprise Linux Desktop Optional 6 |
| Not Vulnerable: | |
Discussion
Red Hat Certificate System Multiple Cross Site Scripting and Security Bypass Vulnerabilities
Red Hat Certificate System is prone to the following security vulnerabilities:
1. Multiple cross-site scripting vulnerabilities.
2. A security-bypass vulnerability.
Successfully exploiting these issues may allow an attacker to bypass certain security restrictions, execute arbitrary script code in the browser of an unsuspecting user, steal cookie-based authentication credentials, and perform certain administrative actions in the vulnerable application.
Red Hat Certificate System is prone to the following security vulnerabilities:
1. Multiple cross-site scripting vulnerabilities.
2. A security-bypass vulnerability.
Successfully exploiting these issues may allow an attacker to bypass certain security restrictions, execute arbitrary script code in the browser of an unsuspecting user, steal cookie-based authentication credentials, and perform certain administrative actions in the vulnerable application.
Exploit / POC
Red Hat Certificate System Multiple Cross Site Scripting and Security Bypass Vulnerabilities
Attackers can use a browser to exploit the security-bypass issue. To exploit the cross-site scripting issue, attackers must entice an unsuspecting victim into following a malicious URI.
Attackers can use a browser to exploit the security-bypass issue. To exploit the cross-site scripting issue, attackers must entice an unsuspecting victim into following a malicious URI.
Solution / Fix
Red Hat Certificate System Multiple Cross Site Scripting and Security Bypass Vulnerabilities
Solution:
Updates are available. Please see the references for more information.
Solution:
Updates are available. Please see the references for more information.
References
Red Hat Certificate System Multiple Cross Site Scripting and Security Bypass Vulnerabilities
References:
References:
- Red Hat Certificate System Homepage (Red Hat)
- Moderate: pki security and enhancement update (Red Hat)