PT-2018-8402 · Red Hat+2 · Pki-Core+3

Adam Mariš · Published 2017-08-01 · Updated 2024-12-10 · CVE-2017-7537

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions pki-core versions prior to 10.6.4

Description A flaw was discovered in the pki-core package where a mock CMC authentication plugin with a hardcoded secret was accidentally enabled by default. This could allow an attacker to bypass the regular authentication process and trick the CA server into issuing certificates.

Recommendations For versions prior to 10.6.4, update to version 10.6.4 or later to resolve the issue. As a temporary workaround, consider disabling the mock CMC authentication plugin until a patch is available.

Exploit

Fix

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

CWE-592

Related Identifiers

CVE-2017-7537

ELSA-2017-2335

RHSA-2017:2335

RHSA-2017_2335

USN-7146-1

Affected Products

Linuxmint

Red Hat

Ubuntu

Pki-Core

References · 19

• 🔥 https://github.com/amitlttwo/CVE-2022-2414-Proof-Of-Concept · Exploit
• 🔥 https://github.com/geniuszlyy/CVE-2022-2414 · Exploit
• 🔥 https://github.com/geniuszly/CVE-2022-2414 · Exploit
• 🔥 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7537 · Exploit
• https://github.com/dogtagpki/pki/commit/876d13c6d20e7e1235b9 · Patch
• https://ubuntu.com/security/CVE-2017-7537 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7146-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2017-7537 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2017:2335 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2017-2335.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2017-7537 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-25715 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-7537 · Security Note
• https://cve.org/CVERecord?id=CVE-2017-7537 · Security Note
• https://osv.dev/vulnerability/CVE-2017-7537 · Vendor Advisory