Skip to content
OpenAdvisories
Unscored RHSA-2009:0006 2 CVEs

Red Hat Security Advisory: rhpki security and bug fix update

Published Sep 15, 2024 · Updated Nov 22, 2025

Ecosystem: Red Hat

Fixed packages 7

ReleasePackageFixed in
Red Hat · Certificate System 7 certificate_system:7.2 pkisetup 0:7.2.0-7
Red Hat · Certificate System 7 certificate_system:7.2 rhpki-ca 0:7.2.0-6
Red Hat · Certificate System 7 certificate_system:7.2 rhpki-common 0:7.2.0-16
Red Hat · Certificate System 7 certificate_system:7.2 rhpki-kra 0:7.2.0-5
Red Hat · Certificate System 7 certificate_system:7.2 rhpki-ocsp 0:7.2.0-5
Red Hat · Certificate System 7 certificate_system:7.2 rhpki-tks 0:7.2.0-5
Red Hat · Certificate System 7 certificate_system:7.2 rhpki-tps 0:7.2.0-8

Vulnerabilities 2

  • Unscored —
    CVE-2008-2367

    Red Hat Certificate System 7.2 uses world-readable permissions for password.conf and unspecified other configuration fi…

  • Unscored —
    CVE-2008-2368

    Red Hat Certificate System 7.2 stores passwords in cleartext in the UserDirEnrollment log, the RA wizard installer log,…

References

  • article
    http://www.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=451998
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=452000
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_0006.json
  • report
    https://access.redhat.com/security/cve/CVE-2008-2367
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-2367
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-2367
  • report
    https://access.redhat.com/security/cve/CVE-2008-2368
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-2368
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-2368