Skip to content
fr Sign in
7.5 High

CVE-2023-4727 A flaw was found in dogtag-pki and pki-core

Description

A flaw was found in dogtag-pki and pki-core. The token authentication scheme can be bypassed with a LDAP injection. By passing the query string parameter sessionID=*, an attacker can authenticate with an existing session saved in the LDAP directory server, which may lead to escalation of privilege.

Affected products and versions

Product Affected versions Fixed in
Red Hat Certificate System 10.4 EUS for RHEL-8 8060020240529205458.07 earliest → < 8060020240529205458.07fb4edf 8060020240529205458.07fb4edf
Red Hat Enterprise Linux 7 Versions not published
Red Hat Enterprise Linux 8 8100020240614102443.82 earliest → < 8100020240614102443.82f485b7 8100020240614102443.82f485b7
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 8040020240329193548.17 earliest → < 8040020240329193548.17df0a3f 8040020240329193548.17df0a3f
Red Hat Enterprise Linux 8.4 Telecommunications Update Service 8040020240329193548.17 earliest → < 8040020240329193548.17df0a3f 8040020240329193548.17df0a3f
Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions 8040020240329193548.17 earliest → < 8040020240329193548.17df0a3f 8040020240329193548.17df0a3f
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support 8060020240329182634.60523 earliest → < 8060020240329182634.60523a7b 8060020240329182634.60523a7b
Red Hat Enterprise Linux 8.6 Telecommunications Update Service 8060020240329182634.60523 earliest → < 8060020240329182634.60523a7b 8060020240329182634.60523a7b
Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions 8060020240329182634.60523 earliest → < 8060020240329182634.60523a7b 8060020240329182634.60523a7b
Show the 5 other branches
Product Affected versions Fixed in
Red Hat Enterprise Linux 8.8 Extended Update Support 8080020240329143735.693 earliest → < 8080020240329143735.693a3987 8080020240329143735.693a3987
Red Hat Enterprise Linux 9 Versions not published
Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions Versions not published
Red Hat Enterprise Linux 9.2 Extended Update Support Versions not published
Red Hat Enterprise Linux 6 Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Red Hat Certificate System 10.4 EUS for RHEL-8

The 2 CVEs of Red Hat Certificate System 10.4 EUS for RHEL-8 →
CVE-2026-18369 Dogtag-pki: pki-core: redhat-pki: pki: acme http-01 validation ssrf via ip literal identifiers and unvalidated redirects 5.8 Medium
Track this CVE