Red Hat Security Advisory

RHSA-2013:0856

pki-tps security update

Released 2013-05-22 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Certificate System 8 pki-tps-8.1.3-5.el5pki, pki-tps-8.1.3-5.el5pki.i386

Fixes 2 records

TI-2013-01663 CVE-2013-1886 · GHSA-63g4-9329-q5x4

Format string vulnerability in the token processing system (pki-tps) in Red Hat…

LOW 37

Format string vulnerability in the token processing system (pki-tps) in Red Hat Certificate System (RHCS) 8.1 and possibly Dogtag Certificate System 9 and 10 allows remote authenticated users to cause a denial of service…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0222 Published 2014-01-24 Fixed CWE-134

TI-2013-01662 CVE-2013-1885 · GHSA-r743-88qv-qhcg

Multiple cross-site scripting (XSS) vulnerabilities in the token processing system…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in the token processing system (pki-tps) in Red Hat Certificate System (RHCS) 8.1 and possibly Dogtag Certificate System 9 and 10 allow remote attackers to inject arbit…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01237 Published 2014-01-24 Fixed CWE-79