Red Hat Security Advisory

RHSA-2012:1550

pki security update

Released 2012-12-06 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Certificate System 8 pki-common-8.1.3-2.el5pki, pki-common-javadoc-8.1.3-2.el5pki, pki-tps-8.1.3-2.el5pki +1

Fixes 3 records

TI-2012-03883 CVE-2012-4543 · GHSA-3rg2-g53j-xh7w

Multiple cross-site scripting (XSS) vulnerabilities in Red Hat Certificate System (RHCS)…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in Red Hat Certificate System (RHCS) before 8.1.3 allow remote attackers to inject arbitrary web script or HTML via the (1) pageStart or (2) pageSize to the displayCRL…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01227 Published 2013-01-04 Fixed CWE-79

TI-2012-03896 CVE-2012-4556 · GHSA-fw6f-r68r-6fjx

The token processing system (pki-tps) in Red Hat Certificate System (RHCS) before 8.1.3…

LOW 21

The token processing system (pki-tps) in Red Hat Certificate System (RHCS) before 8.1.3 allows remote attackers to cause a denial of service (Apache httpd web server child process restart) via certain unspecified empty s…

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.01192 Published 2013-01-04 Fixed CWE-20

TI-2012-03895 CVE-2012-4555 · GHSA-g97f-4ph3-r6fc

The token processing system (pki-tps) in Red Hat Certificate System (RHCS) before 8.1.3…

LOW 21

The token processing system (pki-tps) in Red Hat Certificate System (RHCS) before 8.1.3 does not properly handle interruptions of token format operations, which allows remote attackers to cause a denial of service (NULL…

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.01192 Published 2013-01-04 Fixed