PT-2024-10118 · Pki-Core+8 · Pki-Core+8

Zack Miele · Published 2024-06-11 · Updated 2025-03-14 · CVE-2023-4727

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions dogtag-pki and pki-core (affected versions not specified)

Description The issue is related to an authentication bypass in dogtag-pki and pki-core due to an original error. This can be exploited by a remote attacker to escalate their privileges. The token authentication scheme can be bypassed using a LDAP injection. By passing the query string parameter sessionID=*, an attacker can authenticate with an existing session saved in the LDAP directory server, potentially leading to an escalation of privilege.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-305

Related Identifiers

ALSA-2024:4165

ALSA-2024:4367

BDU:2025-00342

CESA-2024_4367

CVE-2023-4727

INFSA-2024_4165

INFSA-2024_4367

OESA-2025-1238

OESA-2025-1269

OESA-2025-1270

RHSA-2024:4051

RHSA-2024:4070

RHSA-2024:4164

RHSA-2024:4165

RHSA-2024:4179

RHSA-2024:4222

RHSA-2024:4367

RHSA-2024:4403

RHSA-2024:4413

RHSA-2024_4165

RHSA-2024_4222

RHSA-2024_4367

RLSA-2024:4165

Affected Products

Almalinux

Astra Linux

Centos

Debian

Red Hat

Red Os

Rocky Linux

Dogtag Pki

Pki-Core

References · 48

• https://access.redhat.com/errata/RHSA-2024:4165 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2024:4165 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2024-4165.html · Vendor Advisory
• https://osv.dev/vulnerability/RLSA-2024:4165 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-4727 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2024:4165 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-4727 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2024:4179 · Vendor Advisory
• https://errata.almalinux.org/8/ALSA-2024-4367.html · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se18-bulletin-2025-0811SE18 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-4727 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2025-1270 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-4727 · Security Note
• https://linux.oracle.com/errata/ELSA-2024-4367.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-00342 · Security Note