Vulnerability Details CVE-2007-4994
Certificate Server 7.2 in Red Hat Certificate System (RHCS) does not properly handle new revocations that occur while a Certificate Revocation List (CRL) is being generated, which might prevent certain revoked certificates from appearing on the CRL quickly and allow users with revoked certificates to bypass the intended CRL.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 57.2%
CVSS Severity
CVSS v2 Score 7.5
References
- http://osvdb.org/40440
- http://secunia.com/advisories/27557
- http://www.redhat.com/support/errata/RHSA-2007-0934.html
- http://www.securityfocus.com/bid/26377
- http://www.securitytracker.com/id?1020532
- http://www.vupen.com/english/advisories/2007/3405
- http://www.vupen.com/english/advisories/2007/3406
- https://rhn.redhat.com/errata/RHSA-2008-0566.html
- http://osvdb.org/40440
- http://secunia.com/advisories/27557
- http://www.redhat.com/support/errata/RHSA-2007-0934.html
- http://www.securityfocus.com/bid/26377
- http://www.securitytracker.com/id?1020532
- http://www.vupen.com/english/advisories/2007/3405
- http://www.vupen.com/english/advisories/2007/3406
- https://rhn.redhat.com/errata/RHSA-2008-0566.html
Products affected by CVE-2007-4994
-
cpe:2.3:a:redhat:certificate_server:7.2