It was found that a mock CMC authentication plugin with a hardcoded secret was accidentally enabled by default in the pki-core package before 10.6.4. An attacker could potentially use this flaw to bypass the regular authentication process and trick the CA server into issuing certificates.

According to the version of the pki-core packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - It was found that a mock CMC authentication plugin with     a hardcoded secret was accidentally enabled by default     in the pki-core package. An attacker could potentially     use this flaw to bypass the regular authentication     process and trick the CA server into issuing     certificates. (CVE-2017-7537)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security Fix(es) :

  - It was found that a mock CMC authentication plugin with     a hard-coded secret was accidentally enabled by default     in the pki-core package. An attacker could potentially     use this flaw to bypass the regular authentication     process and trick the CA server into issuing     certificates. (CVE-2017-7537)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-2335 advisory.

    - Resolves CVE-2017-7537

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2017:2335 advisory.

    Red Hat Certificate System is an enterprise software system designed to manage enterprise public key     infrastructure (PKI) deployments. PKI Core contains fundamental packages required by Red Hat Certificate     System, which comprise the Certificate Authority (CA) subsystem.

    Security Fix(es):

    * It was found that a mock CMC authentication plugin with a hardcoded secret was accidentally enabled by     default in the pki-core package. An attacker could potentially use this flaw to bypass the regular     authentication process and trick the CA server into issuing certificates. (CVE-2017-7537)

    This issue was discovered by Christina Fu (Red Hat).

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
103022	EulerOS 2.0 SP2 : pki-core (EulerOS-SA-2017-1184)	Nessus	Huawei Local Security Checks	high
103021	EulerOS 2.0 SP1 : pki-core (EulerOS-SA-2017-1183)	Nessus	Huawei Local Security Checks	high
102652	Scientific Linux Security Update : pki-core on SL7.x x86_64 (20170801)	Nessus	Scientific Linux Local Security Checks	high
102342	Oracle Linux 7 : pki-core (ELSA-2017-2335)	Nessus	Oracle Linux Local Security Checks	high
102117	RHEL 7 : pki-core (RHSA-2017:2335)	Nessus	Red Hat Local Security Checks	high

Detections

Analytics

CVE-2017-7537

high

Tenable Plugins

high

high

high

high

high