CVE:CVE-2010-3868
CNNVD:CNNVD-201011-187
Red Hat Certificate System (RHCS) 7.3和8版本以及Dogtag Certificate System不要求对解密SCEP协议一次性密码的请求进行验证。远程攻击者可以通过嗅探网络得到SCEP请求，然后向Certificate Authority组件发送解密请求获得PIN密码。
solution:Upgrade redhat certificate_system to a higher version than 7.3,8,and avoid the version 7.3,8; Upgrade redhat dogtag_certificate_system to a higher version than *