What is CVE-2006-4991?

RSA Keon Certificate Authority (KeonCA) Manager 6.5.1 and 6.6 allows privileged local users to hide malicious Certificate Authority (CA) activities by modifying CA auditor logs without detection by (1) modifying or deleting a and its signature from the XML log in a way that is not detected by the integrity check function that operates on the entire pool, or (2) modifying entries in the live log file, which is only signed during rotation.

How severe is CVE-2006-4991?

CVE-2006-4991 has a CVSS 2.0 base score of 3.6, rated low severity.

Is CVE-2006-4991 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (11th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2006-4991?

CVE-2006-4991 primarily affects Rsa Keon Certificate Authority Manager. In total, 2 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2006-4991?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

When was CVE-2006-4991 published?

CVE-2006-4991 was published on 2006-09-26 and last updated on 2026-06-16.

CVE-2006-4991

CVE-2006-4991 is a low-severity vulnerability in Rsa Keon Certificate Authority Manager with a CVSS 2.0 base score of 3.6. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

Severity: Low (CVSS 2.0 base score 3.6)
EPSS exploit prediction: 0% (11th percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Rsa Keon Certificate Authority Manager
Published: 2006-09-26
Last modified: 2026-06-16

Description

RSA Keon Certificate Authority (KeonCA) Manager 6.5.1 and 6.6 allows privileged local users to hide malicious Certificate Authority (CA) activities by modifying CA auditor logs without detection by (1) modifying or deleting a <LOG BLOCK> and its signature from the XML log in a way that is not detected by the integrity check function that operates on the entire pool, or (2) modifying entries in the live log file, which is only signed during rotation.

Frequently asked questions

What is CVE-2006-4991?: RSA Keon Certificate Authority (KeonCA) Manager 6.5.1 and 6.6 allows privileged local users to hide malicious Certificate Authority (CA) activities by modifying CA auditor logs without detection by (1) modifying or deleting a <LOG BLOCK> and its signature from the XML log in a way that is not detected by the integrity check function that operates on the entire pool, or (2) modifying entries in the live log file, which is only signed during rotation.
How severe is CVE-2006-4991?: CVE-2006-4991 has a CVSS 2.0 base score of 3.6, rated low severity.
Is CVE-2006-4991 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (11th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2006-4991?: CVE-2006-4991 primarily affects Rsa Keon Certificate Authority Manager. In total, 2 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-2006-4991?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
When was CVE-2006-4991 published?: CVE-2006-4991 was published on 2006-09-26 and last updated on 2026-06-16.

References

Affected products (2)

cpe:2.3:a:rsa:keon_certificate_authority_manager:6.5.1:*:*:*:*:*:*:*
cpe:2.3:a:rsa:keon_certificate_authority_manager:6.6:*:*:*:*:*:*:*