CVE-2010-3868: Red Hat Certificate System

Medium severity, CVSS 5.8. EPSS: 1.3% chance of exploitation in the next 30 days.

Red Hat Certificate System (RHCS) 7.3 and 8 and Dogtag Certificate System do not require authentication for requests to decrypt SCEP one-time PINs, which allows remote attackers to obtain PINs by sniffing the network for SCEP requests and then sending decryption requests to the Certificate Authority component.

Affected products

• Red Hat Certificate System: version 7.3 only; version 8 only
• Red Hat Dogtag Certificate System: any version

Published 2010-11-17. Last modified 2026-06-16.