← CVE Intelligence

CVE-2023-4727

Ca: token authentication bypass vulnerability PUBLISHED

Description (CNA)

A flaw was found in dogtag-pki and pki-core. The token authentication scheme can be bypassed with a LDAP injection. By passing the query string parameter sessionID=*, an attacker can authenticate with an existing session saved in the LDAP directory server, which may lead to escalation of privilege.

Affected (CNA)

Vendor / productVersions
Not supplied / Not suppliedaffected 0 before 11.5.1
Red Hat / Red Hat Certificate System 10.4 EUS for RHEL-8unaffected 8060020240529205458.07fb4edf before *
Red Hat / Red Hat Enterprise Linux 7unaffected 0:10.5.18-32.el7_9 before *
Red Hat / Red Hat Enterprise Linux 8unaffected 8100020240614102443.82f485b7 before *
Red Hat / Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Supportunaffected 8040020240329193548.17df0a3f before *
Red Hat / Red Hat Enterprise Linux 8.4 Telecommunications Update Serviceunaffected 8040020240329193548.17df0a3f before *
Red Hat / Red Hat Enterprise Linux 8.4 Update Services for SAP Solutionsunaffected 8040020240329193548.17df0a3f before *
Red Hat / Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Supportunaffected 8060020240329182634.60523a7b before *
Red Hat / Red Hat Enterprise Linux 8.6 Telecommunications Update Serviceunaffected 8060020240329182634.60523a7b before *
Red Hat / Red Hat Enterprise Linux 8.6 Update Services for SAP Solutionsunaffected 8060020240329182634.60523a7b before *
Red Hat / Red Hat Enterprise Linux 8.8 Extended Update Supportunaffected 8080020240329143735.693a3987 before *
Red Hat / Red Hat Enterprise Linux 9unaffected 0:11.5.0-2.el9_4 before *
Red Hat / Red Hat Enterprise Linux 9.0 Update Services for SAP Solutionsunaffected 0:11.0.6-3.el9_0 before *
Red Hat / Red Hat Enterprise Linux 9.2 Extended Update Supportunaffected 0:11.3.0-2.el9_2 before *
Red Hat / Red Hat Enterprise Linux 6unknown

CWE

CWE-305

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.