VYPR
← All advisories
Unrated severityNVD Advisory· Published Jan 30, 2009· Updated Jun 16, 2026

CVE-2008-5082

CVE-2008-5082

Description

The verifyProof function in the Token Processing System (TPS) component in Red Hat Certificate System (RHCS) 7.1 through 7.3 and Dogtag Certificate System 1.0 returns successfully even when token enrollment did not use the hardware key, which allows remote authenticated users with enrollment privileges to bypass intended authentication policies by performing enrollment with a software key.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6
  • Red Hat/Certificate System4 versions
    cpe:2.3:a:redhat:certificate_system:7.1:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:redhat:certificate_system:7.1:*:*:*:*:*:*:*
    • cpe:2.3:a:redhat:certificate_system:7.2:*:*:*:*:*:*:*
    • cpe:2.3:a:redhat:certificate_system:7.3:*:*:*:*:*:*:*
    • (no CPE)range: 7.1 - 7.3
  • Red Hat/Dogtag Certificate System
    cpe:2.3:a:redhat:_dogtag_certificate_system:1.0:*:*:*:*:*:*:*
  • Dogtag/Certificate Systemllm-fuzzy
    Range: 1.0

Patches

Vulnerability mechanics

References

6

News mentions

0

No linked articles in our index yet.