| Package | Affected versions | Patched versions |
|---|---|---|
| certificate system | = 7.3= 8 |
Red Hat Certificate System (RHCS) 7.3 and 8 and Dogtag Certificate System do not require authentication for requests to decrypt SCEP one-time PINs, which allows remote attackers to obtain PINs by sniffing the network for SCEP requests and then sending decryption requests to the Certificate Authority component.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free