CVE-2012-4543

Related Files

Red Hat Security Advisory 2013-0511-02

Posted Feb 21, 2013

Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2013-0511-02 - Red Hat Certificate System is an enterprise software system designed to manage enterprise public key infrastructure deployments. PKI Core contains fundamental packages required by Red Hat Certificate System, which comprise the Certificate Authority subsystem. Note: The Certificate Authority component provided by this advisory cannot be used as a standalone server. It is installed and operates as a part of Identity Management in Red Hat Enterprise Linux. Multiple cross-site scripting flaws were discovered in Certificate System. An attacker could use these flaws to perform a cross-site scripting attack against victims using Certificate System's web interface.

tags | advisory, web, xss

systems | linux, redhat

advisories | CVE-2012-4543

SHA-256 | 2086b178b0c0319456115918e19130d42519af136e6ee4418e4f4bd230e13ad5

Download | Favorite | View

Red Hat Security Advisory 2012-1550-01

Posted Dec 7, 2012

Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2012-1550-01 - Red Hat Certificate System is an enterprise software system designed to manage enterprise Public Key Infrastructure deployments. Multiple cross-site scripting flaws were discovered in the Red Hat Certificate System. An attacker could use these flaws to perform a cross-site scripting attack against victims using Certificate System's web interface. Multiple denial of service flaws were found in the Red Hat Certificate System token processing. A Certificate System user could use these flaws to crash the Apache httpd web server child process, possibly interrupting the processing of other users' requests.

tags | advisory, web, denial of service, xss

systems | linux, redhat

advisories | CVE-2012-4543, CVE-2012-4555, CVE-2012-4556

SHA-256 | 26ae7d0ec1a67dd00f9ba9c95c8dfaad4076143b7d0bc2c4864455634bd80d9f

Download | Favorite | View