Every CVE Search/ Get API key

CVE-2017-7537

It was found that a mock CMC authentication plugin with a hardcoded secret was accidentally...

5.9 MediumFix available

It was found that a mock CMC authentication plugin with a hardcoded secret was accidentally enabled by default in the pki-core package before 10.6.4. An attacker could potentially use this flaw to bypass the regular authentication process and trick the CA server into issuing certificates.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
High
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
High
Availability
None

Exploit likelihood

1.46%Up 0.6 points since Apr 14, 2021
90%50%10%1%

What each source reports

CVE List Score used 5.9

It was found that a mock CMC authentication plugin with a hardcoded secret was accidentally enabled by default in the pki-core package before 10.6.4. An attacker could potentially use this flaw to bypass the regular authentication process and trick the CA server into issuing certificates.

Record
CVE-2017-7537
CVSS 3.0
5.9 MediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
Weakness
CWE-592
Updated
2026-11-02
EUVDEUVD-2017-16550 5.9

It was found that a mock CMC authentication plugin with a hardcoded secret was accidentally enabled by default in the pki-core package before 10.6.4. An attacker could potentially use this flaw to bypass the regular authentication process and trick the CA server into issuing certificates.

Record
EUVD-2017-16550
CVSS 3.0
5.9 MediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
Updated
2026-11-03
GitHub AdvisoriesGHSA-x46g-cxp8-8wjm 7.5

It was found that a mock CMC authentication plugin with a hardcoded secret was accidentally...

It was found that a mock CMC authentication plugin with a hardcoded secret was accidentally enabled by default in the pki-core package before 10.6.4. An attacker could potentially use this flaw to bypass the regular authentication process and trick the CA server into issuing certificates.

Record
GHSA-x46g-cxp8-8wjm
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Weakness
CWE-798
Updated
2026-11-02
NVD 5.9

It was found that a mock CMC authentication plugin with a hardcoded secret was accidentally enabled by default in the pki-core package before 10.6.4. An attacker could potentially use this flaw to bypass the regular authentication process and trick the CA server into issuing certificates.

Record
CVE-2017-7537
CVSS 3.0
5.9 MediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:P/A:N
Weakness
CWE-592, CWE-798
Updated
2026-11-02
OSV 7.5

It was found that a mock CMC authentication plugin with a hardcoded secret was accidentally enabled by default in the pki-core package before 10.6.4. An attacker could potentially use this flaw to bypass the regular authentication process and trick the CA server into issuing certificates.

Record
CVE-2017-7537
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Updated
2026-11-02
OSVDEBIAN-CVE-2017-7537 7.5

It was found that a mock CMC authentication plugin with a hardcoded secret was accidentally enabled by default in the pki-core package before 10.6.4. An attacker could potentially use this flaw to bypass the regular authentication process and trick the CA server into issuing certificates.

Record
DEBIAN-CVE-2017-7537
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Updated
2026-11-02
OSVRHSA-2017:2335 5.9

Red Hat Security Advisory: pki-core security update

Record
RHSA-2017:2335
CVSS 3.0
5.9 MediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
Updated
2026-11-02
OSVUBUNTU-CVE-2017-7537 7.5

It was found that a mock CMC authentication plugin with a hardcoded secret was accidentally enabled by default in the pki-core package before 10.6.4. An attacker could potentially use this flaw to bypass the regular authentication process and trick the CA server into issuing certificates.

Record
UBUNTU-CVE-2017-7537
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS 3.0
5.9 MediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
Updated
2026-11-02
OSVUSN-7146-1 No score

dogtag-pki vulnerabilities

Christina Fu discovered that Dogtag PKI accidentally enabled a mock authentication plugin by default. An attacker could potentially use this flaw to bypass the regular authentication process and trick the CA server into issuing certificates. This issue only affected Ubuntu 16.04 LTS. (CVE-2017-7537)

It was discovered that Dogtag PKI did not properly sanitize user input. An attacker could possibly use this issue to perform cross site scripting and obtain sensitive information. This issue only affected Ubuntu 22.04 LTS. (CVE-2020-25715)

It was discovered that the XML parser did not properly handle entity expansion. A remote attacker could potentially retrieve the content of arbitrary files by sending specially crafted HTTP requests. This issue only affected Ubuntu 16.04 LTS. (CVE-2022-2414)

Record
USN-7146-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
dogtag-pki
Debian:11
 before 10.3.5+12-5
10.3.5+12-5
pki-base
Red Hat:enterprise_linux:7::client
 before 0:10.4.1-11.el7
0:10.4.1-11.el7
pki-base-java
Red Hat:enterprise_linux:7::client
 before 0:10.4.1-11.el7
0:10.4.1-11.el7
pki-ca
Red Hat:enterprise_linux:7::client
 before 0:10.4.1-11.el7
0:10.4.1-11.el7
pki-core
Red Hat:enterprise_linux:7::client
 before 0:10.4.1-11.el7
0:10.4.1-11.el7
pki-core-debuginfo
Red Hat:enterprise_linux:7::client
 before 0:10.4.1-11.el7
0:10.4.1-11.el7
pki-javadoc
Red Hat:enterprise_linux:7::client
 before 0:10.4.1-11.el7
0:10.4.1-11.el7
pki-kra
Red Hat:enterprise_linux:7::client
 before 0:10.4.1-11.el7
0:10.4.1-11.el7
pki-server
Red Hat:enterprise_linux:7::client
 before 0:10.4.1-11.el7
0:10.4.1-11.el7
pki-symkey
Red Hat:enterprise_linux:7::client
 before 0:10.4.1-11.el7
0:10.4.1-11.el7
Show 33 moreShow less
Affected packages
PackageAffectedFixed
pki-tools
Red Hat:enterprise_linux:7::client
 before 0:10.4.1-11.el7
0:10.4.1-11.el7
pki-base
Red Hat:enterprise_linux:7::computenode
 before 0:10.4.1-11.el7
0:10.4.1-11.el7
pki-base-java
Red Hat:enterprise_linux:7::computenode
 before 0:10.4.1-11.el7
0:10.4.1-11.el7
pki-ca
Red Hat:enterprise_linux:7::computenode
 before 0:10.4.1-11.el7
0:10.4.1-11.el7
pki-core
Red Hat:enterprise_linux:7::computenode
 before 0:10.4.1-11.el7
0:10.4.1-11.el7
pki-core-debuginfo
Red Hat:enterprise_linux:7::computenode
 before 0:10.4.1-11.el7
0:10.4.1-11.el7
pki-javadoc
Red Hat:enterprise_linux:7::computenode
 before 0:10.4.1-11.el7
0:10.4.1-11.el7
pki-kra
Red Hat:enterprise_linux:7::computenode
 before 0:10.4.1-11.el7
0:10.4.1-11.el7
pki-server
Red Hat:enterprise_linux:7::computenode
 before 0:10.4.1-11.el7
0:10.4.1-11.el7
pki-symkey
Red Hat:enterprise_linux:7::computenode
 before 0:10.4.1-11.el7
0:10.4.1-11.el7
pki-tools
Red Hat:enterprise_linux:7::computenode
 before 0:10.4.1-11.el7
0:10.4.1-11.el7
pki-base
Red Hat:enterprise_linux:7::server
 before 0:10.4.1-11.el7
0:10.4.1-11.el7
pki-base-java
Red Hat:enterprise_linux:7::server
 before 0:10.4.1-11.el7
0:10.4.1-11.el7
pki-ca
Red Hat:enterprise_linux:7::server
 before 0:10.4.1-11.el7
0:10.4.1-11.el7
pki-core
Red Hat:enterprise_linux:7::server
 before 0:10.4.1-11.el7
0:10.4.1-11.el7
pki-core-debuginfo
Red Hat:enterprise_linux:7::server
 before 0:10.4.1-11.el7
0:10.4.1-11.el7
pki-kra
Red Hat:enterprise_linux:7::server
 before 0:10.4.1-11.el7
0:10.4.1-11.el7
pki-server
Red Hat:enterprise_linux:7::server
 before 0:10.4.1-11.el7
0:10.4.1-11.el7
pki-symkey
Red Hat:enterprise_linux:7::server
 before 0:10.4.1-11.el7
0:10.4.1-11.el7
pki-tools
Red Hat:enterprise_linux:7::server
 before 0:10.4.1-11.el7
0:10.4.1-11.el7
pki-javadoc
Red Hat:enterprise_linux:7::server
 before 0:10.4.1-11.el7
0:10.4.1-11.el7
pki-base
Red Hat:enterprise_linux:7::workstation
 before 0:10.4.1-11.el7
0:10.4.1-11.el7
pki-base-java
Red Hat:enterprise_linux:7::workstation
 before 0:10.4.1-11.el7
0:10.4.1-11.el7
pki-ca
Red Hat:enterprise_linux:7::workstation
 before 0:10.4.1-11.el7
0:10.4.1-11.el7
pki-core
Red Hat:enterprise_linux:7::workstation
 before 0:10.4.1-11.el7
0:10.4.1-11.el7
pki-core-debuginfo
Red Hat:enterprise_linux:7::workstation
 before 0:10.4.1-11.el7
0:10.4.1-11.el7
pki-kra
Red Hat:enterprise_linux:7::workstation
 before 0:10.4.1-11.el7
0:10.4.1-11.el7
pki-server
Red Hat:enterprise_linux:7::workstation
 before 0:10.4.1-11.el7
0:10.4.1-11.el7
pki-symkey
Red Hat:enterprise_linux:7::workstation
 before 0:10.4.1-11.el7
0:10.4.1-11.el7
pki-tools
Red Hat:enterprise_linux:7::workstation
 before 0:10.4.1-11.el7
0:10.4.1-11.el7
pki-javadoc
Red Hat:enterprise_linux:7::workstation
 before 0:10.4.1-11.el7
0:10.4.1-11.el7
dogtag-pki
Ubuntu:Pro:16.04:LTS
 before 10.2.6+git20160317-1ubuntu0.1~esm1, plus listed versions
10.2.6-110.2.6-210.2.6-310.2.6+git20160317-1
10.2.6+git20160317-1ubuntu0.1~esm1
dogtag-pki
Ubuntu:Pro:22.04:LTS
 before 11.0.0-1ubuntu0.1~esm1, plus listed versions
10.10.2-3build111.0.0-1
11.0.0-1ubuntu0.1~esm1

History

History
RecordedChangedSources
aliases, productsEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2017-7537 is a medium vulnerability (CVSS 5.9) in [unknown] Pki-core, published July 26, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.46%, the 73rd percentile. Fixed in dogtag-pki 10.3.5+12-5.

References

Show 10 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open