CVE:CVE-2008-5082
CNNVD:CNNVD-200901-448
即使象征性注册未使用硬件key，Red Hat Certificate System(RHCS)7.1到7.3和Dogtag Certificate System 1.0中的Token Processing System(TPS)组件里的verifyProof函数仍能成功返回，这使得拥有注册特权的远程认证用户可以借助一个软件key进行注册，从而绕过设置的身份验证规则。
solution:Upgrade redhat _dogtag_certificate_system to a higher version than 1.0,and avoid the version 1.0; Upgrade redhat certificate_system to a higher version than 7.1,7.2,7.3,and avoid the version 7.1,7.2,7.3