CVE-2007-4994 Certificate Server 7.2 in Red Hat Certificate System (RHCS) does not properly handle new revocations that occur while a Certificate Revocation List (CRL) is being generated, which might prevent certai...
HighCVSS 7.5
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Certificate Server 7.2 in Red Hat Certificate System (RHCS) does not properly handle new revocations that occur while a Certificate Revocation List (CRL) is being generated, which might prevent certain revoked certificates from appearing on the CRL quickly and allow users with revoked certificates to bypass the intended CRL.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| redhat certificate server | = 7.2 | No fix listed |
References
- 40440 vdb-entry
- 27557 third-party-advisory
- RHSA-2007:0934 vendor-advisory
- 26377 vdb-entry
- 1020532 vdb-entry
- ADV-2007-3405 vdb-entry
- ADV-2007-3406 vdb-entry
- RHSA-2008:0566 vendor-advisory