CVE-2023-4727: Ca: token authentication bypass vulnerability
A flaw was found in dogtag-pki and pki-core. The token authentication scheme can be bypassed with a LDAP injection. By passing the query string parameter sessionID=, an attacker can authenticate with an existing session saved in the LDAP directory server, which may lead to escalation of privilege.
Other sources
The token authentication scheme in Dogtag CA can be bypassed with a Ldap injection. By passing the query string parameter sessionID=, an attacker can authenticate with the existing session saved in Ldap directory server.
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-4727?
CVE-2023-4727 has been classified as a high-severity vulnerability due to its potential for LDAP injection and session escalation.
How do I fix CVE-2023-4727?
To fix CVE-2023-4727, it is recommended to update to the latest version of Dogtag PKI or pki-core that addresses this vulnerability.
What kind of attacks can CVE-2023-4727 enable?
CVE-2023-4727 can enable attackers to bypass token authentication and authenticate using an existing session stored in the LDAP directory.
Which software is affected by CVE-2023-4727?
CVE-2023-4727 affects Dogtag PKI and pki-core software.
How can I mitigate the risks associated with CVE-2023-4727?
Mitigation of CVE-2023-4727 involves implementing input validation to prevent LDAP injection and regularly updating to secure software versions.