|Category:||Red Hat Local Security Checks|
|Title:||RedHat Update for pki-core RHSA-2017:2335-01|
|Summary:||The remote host is missing an update for the 'pki-core'; package(s) announced via the referenced advisory.|
The remote host is missing an update for the 'pki-core'
package(s) announced via the referenced advisory.
Red Hat Certificate System is an enterprise
software system designed to manage enterprise public key infrastructure (PKI)
deployments. PKI Core contains fundamental packages required by Red Hat
Certificate System, which comprise the Certificate Authority (CA) subsystem.
Security Fix(es): * It was found that a mock CMC authentication plugin with a
hardcoded secret was accidentally enabled by default in the pki-core package. An
attacker could potentially use this flaw to bypass the regular authentication
process and trick the CA server into issuing certificates. (CVE-2017-7537) This
issue was discovered by Christina Fu (Red Hat).
pki-core on Red Hat Enterprise Linux Server (v. 7)
Please Install the Updated Packages.
Common Vulnerability Exposure (CVE) ID: CVE-2017-7537|
RedHat Security Advisories: RHSA-2017:2335
|Copyright||Copyright (C) 2017 Greenbone Networks GmbH|
|This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit.|
To run a free test of this vulnerability against your system, register below.