dogtag-pki LDAP Injection Bypass Auth Vulnerability (CVE-2023-4727) Advisory

Vulnerability Overview Vulnerability Name: CVE-2023-4727 Severity: High (7.5 / 10) CVSS v3 Base Metrics: - Attack Vector: Adjacent - Attack Complexity: High - Privileges Required: None - User Interaction: None - Scope: Unchanged - Confidentiality: High - Integrity: High - Availability: High Description: A vulnerability was identified in dogtag-pki and pki-core. By passing the query string parameter , an attacker can bypass the token authentication scheme for LDAP injection. An attacker can authenticate using an existing session stored in the LDAP directory server, which may lead to privilege escalation. Affected Versions Affected Versions: Unknown Fixed Versions: Unknown Remediation Recommendation: It is recommended to upgrade to a version that fixes this vulnerability. Specific version information is not provided on the page. References NVD Red Hat Security Bugzilla Red Hat Errata Red Hat Errata Red Hat Errata Red Hat Errata Red Hat Errata Red Hat Errata Red Hat Errata Red Hat Errata Red Hat Errata GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub Issue GitHub

Goal Reached Thanks to every supporter — we hit 100%!

dogtag-pki LDAP Injection Bypass Auth Vulnerability (CVE-2023-4727) Advisory

More from this source