PT-2012-4167 · Red Hat+1 · Dogtag Certificate System+3

Published 2012-08-13 · Updated 2023-02-13 · CVE-2012-2662

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Red Hat Certificate System versions prior to 8.1.1 Dogtag Certificate System (affected versions not specified)

Description The issue concerns multiple cross-site scripting (XSS) vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to the (1) System Agent or (2) End Entity pages.

Recommendations For Red Hat Certificate System versions prior to 8.1.1, update to version 8.1.1 or later. For Dogtag Certificate System, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CESA-2015_1347

CVE-2012-2662

RHSA-2012:1103

RHSA-2015:1347

RHSA-2015_1347

Affected Products

Centos

Dogtag Certificate System

Red Hat

Red Hat Certificate System

References · 17

• http://rhn.redhat.com/errata/RHSA-2012-1103.html · Vendor Advisory
• http://secunia.com/advisories/50013 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2015-1347.html · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2015-1347.html · Vendor Advisory
• http://securitytracker.com/id?1027284 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-2662 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2662 · Security Note
• http://osvdb.org/84099 · Note
• http://securityfocus.com/bid/54608 · Note
• https://rhn.redhat.com/errata/RHSA-2015-1347.html · Note
• https://access.redhat.com/security/cve/CVE-2012-2662 · Note
• https://access.redhat.com/errata/RHSA-2015:1347 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/77101 · Note
• https://lists.centos.org/pipermail/centos-cr-announce/2015-July/021646.html · Note
• https://lists.centos.org/pipermail/centos-cr-announce/2015-July/028336.html · Note