Unscored severity · published Sep 26, 2006
CVE-2006-4991
RSA Keon Certificate Authority (KeonCA) Manager 6.5.1 and 6.6 allows privileged local users to hide malicious Certificate Authority (CA) activities by modifying CA auditor logs…
–
CVSS
0.2%
EPSS
No
On KEV
Description
RSA Keon Certificate Authority (KeonCA) Manager 6.5.1 and 6.6 allows privileged local users to hide malicious Certificate Authority (CA) activities by modifying CA auditor logs without detection by (1) modifying or deleting a <LOG BLOCK> and its signature from the XML log in a way that is not detected by the integrity check function that operates on the entire pool, or (2) modifying entries in the live log file, which is only signed during rotation.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 11% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
KC
Keon Certificate Authority Manager · Rsa
6.5.1; 6.6 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-4991
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-4991
Vendor Advisory
http://lists.grok.org.uk/pipermail/full-disclosure/2006-September/049592.html
www.securityfocus.com
http://www.securityfocus.com/archive/1/446742/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/20136
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/29065
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/29068