Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2023-4727

Ca: token authentication bypass vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
redhat

Description

A flaw was found in dogtag-pki and pki-core. The token authentication scheme can be bypassed with a LDAP injection. By passing the query string parameter sessionID=*, an attacker can authenticate with an existing session saved in the LDAP directory server, which may lead to escalation of privilege.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

keycloak

Default version status: unaffected

  • 0 to < 11.5.1affected

Red Hat Red Hat Certificate System 10.4 EUS for RHEL-8

Default version status: affected

  • 8060020240529205458.07fb4edf to < *unaffected

Red Hat Red Hat Enterprise Linux 7

Default version status: affected

  • 0:10.5.18-32.el7_9 to < *unaffected

Red Hat Red Hat Enterprise Linux 8

Default version status: affected

  • 8100020240614102443.82f485b7 to < *unaffected

Red Hat Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support

Default version status: affected

  • 8040020240329193548.17df0a3f to < *unaffected

Red Hat Red Hat Enterprise Linux 8.4 Telecommunications Update Service

Default version status: affected

  • 8040020240329193548.17df0a3f to < *unaffected

Red Hat Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions

Default version status: affected

  • 8040020240329193548.17df0a3f to < *unaffected

Red Hat Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support

Default version status: affected

  • 8060020240329182634.60523a7b to < *unaffected

Red Hat Red Hat Enterprise Linux 8.6 Telecommunications Update Service

Default version status: affected

  • 8060020240329182634.60523a7b to < *unaffected

Red Hat Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions

Default version status: affected

  • 8060020240329182634.60523a7b to < *unaffected

Red Hat Red Hat Enterprise Linux 8.8 Extended Update Support

Default version status: affected

  • 8080020240329143735.693a3987 to < *unaffected

Red Hat Red Hat Enterprise Linux 9

Default version status: affected

  • 0:11.5.0-2.el9_4 to < *unaffected

Red Hat Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions

Default version status: affected

  • 0:11.0.6-3.el9_0 to < *unaffected

Red Hat Red Hat Enterprise Linux 9.2 Extended Update Support

Default version status: affected

  • 0:11.3.0-2.el9_2 to < *unaffected

Red Hat Red Hat Enterprise Linux 6

Default version status: unknown

References