CVE-2009-0588
agent/request/op.cgi in the Registration Authority (RA) component in Red Hat Certificate System ...
CVE-2009-0588 is a medium vulnerability (CVSS 6.5) in Redhat Certificate System, published May 27, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.31%, the 71st percentile. Fixed in rhpki-ra 0:7.3.0-69.el4.
- Severity
- 6.5 MediumCVSS 2.0, NVD
- Exploit chance
- 1.31%EPSS, 71st percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
0:7.3.0-69.el4rhpki-ra
Description
agent/request/op.cgi in the Registration Authority (RA) component in Red Hat Certificate System (RHCS) 7.3 and Dogtag Certificate System allows remote authenticated users to approve certificate requests queued for arbitrary agent groups via a modified request ID field.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
rhpki-raRed Hat:certificate_system:7.3 | before 0:7.3.0-69.el4 | 0:7.3.0-69.el4 |
What each source reports
NVD Score used
agent/request/op.cgi in the Registration Authority (RA) component in Red Hat Certificate System (RHCS) 7.3 and Dogtag Certificate System allows remote authenticated users to approve certificate requests queued for arbitrary agent groups via a modified request ID field.
- Record
CVE-2009-0588- CVSS 2.0
- 6.5 Medium
AV:N/AC:L/Au:S/C:P/I:P/A:P - Updated
- 2026-11-02
CVE ListNo score
agent/request/op.cgi in the Registration Authority (RA) component in Red Hat Certificate System (RHCS) 7.3 and Dogtag Certificate System allows remote authenticated users to approve certificate requests queued for arbitrary agent groups via a modified request ID field.
- Record
CVE-2009-0588- Updated
- 2026-11-02
EUVDEUVD-2009-0591No score
agent/request/op.cgi in the Registration Authority (RA) component in Red Hat Certificate System (RHCS) 7.3 and Dogtag Certificate System allows remote authenticated users to approve certificate requests queued for arbitrary agent groups via a modified request ID field.
- Record
EUVD-2009-0591- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-8q6c-cq42-3qq7No score
agent/request/op.cgi in the Registration Authority (RA) component in Red Hat Certificate System ...
agent/request/op.cgi in the Registration Authority (RA) component in Red Hat Certificate System (RHCS) 7.3 and Dogtag Certificate System allows remote authenticated users to approve certificate requests queued for arbitrary agent groups via a modified request ID field.
- Record
GHSA-8q6c-cq42-3qq7- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
bugzilla.redhat.com/show_bug.cgi?id=488706
secunia.com/advisories/35263
securitytracker.com/id?1022278
securityfocus.com/bid/35104
redhat.com/support/errata/RHSA-2009-1065.html
Show 8 moreShow less
nvd.nist.gov/vuln/detail/CVE-2009-0588
github.com/advisories/GHSA-8q6c-cq42-3qq7
access.redhat.com/errata/RHSA-2009:1065
security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1065.json
cve.org/CVERecord?id=CVE-2009-0588