Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline

CVE-2023-4727

🗓️ 11 Jun 2024 20:09:15Reported by redhatType 
cve
 cve🔗 web.nvd.nist.gov👁 44 Views

Flaw in dogtag-pki and pki-core allows LDAP injection bypas

Show more
Related
Affected
Refs
ReporterTitlePublishedViews
Family
Tenable Nessus		RHEL 9 : pki-core (RHSA-2024:4165)
27 Jun 202400:00
–nessus
Tenable Nessus		RHEL 8 : pki-core (RHSA-2024:4179)
1 Jul 202400:00
–nessus
Tenable Nessus		RHEL 8 : pki-core (RHSA-2024:4367)
8 Jul 202400:00
–nessus
Tenable Nessus		Oracle Linux 7 : pki-core (ELSA-2024-4222)
2 Jul 202400:00
–nessus
Tenable Nessus		AlmaLinux 9 : pki-core (ALSA-2024:4165)
28 Jun 202400:00
–nessus
Tenable Nessus		RHEL 8 : Red Hat Certificate System 10.4 for RHEL 8 (RHSA-2024:4070)
24 Jun 202400:00
–nessus
Tenable Nessus		RHEL 9 : pki-core (RHSA-2024:4051)
24 Jun 202400:00
–nessus
Tenable Nessus		Amazon Linux 2 : pki-core (ALAS-2024-2586)
12 Jul 202400:00
–nessus
Tenable Nessus		RHEL 9 : pki-core (RHSA-2024:4413)
9 Jul 202400:00
–nessus
Tenable Nessus		Oracle Linux 8 : pki-core (ELSA-2024-4367)
11 Jul 202400:00
–nessus
Rows per page
[
  {
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "11.5.1",
        "versionType": "semver"
      }
    ],
    "packageName": "keycloak",
    "collectionURL": "https://www.keycloak.org/",
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Certificate System 10.4 EUS for RHEL-8",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "redhat-pki:10",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "8060020240529205458.07fb4edf",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:certificate_system_eus:10.4::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 7",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "pki-core",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:10.5.18-32.el7_9",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:7::workstation",
      "cpe:/o:redhat:enterprise_linux:7::computenode",
      "cpe:/o:redhat:enterprise_linux:7::server",
      "cpe:/o:redhat:enterprise_linux:7::client"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "pki-core:10.6",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "8100020240614102443.82f485b7",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:enterprise_linux:8::appstream"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "pki-core:10.6",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "8040020240329193548.17df0a3f",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:rhel_aus:8.4::appstream",
      "cpe:/a:redhat:rhel_e4s:8.4::appstream",
      "cpe:/a:redhat:rhel_tus:8.4::appstream"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.4 Telecommunications Update Service",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "pki-core:10.6",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "8040020240329193548.17df0a3f",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:rhel_aus:8.4::appstream",
      "cpe:/a:redhat:rhel_e4s:8.4::appstream",
      "cpe:/a:redhat:rhel_tus:8.4::appstream"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "pki-core:10.6",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "8040020240329193548.17df0a3f",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:rhel_aus:8.4::appstream",
      "cpe:/a:redhat:rhel_e4s:8.4::appstream",
      "cpe:/a:redhat:rhel_tus:8.4::appstream"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "pki-core:10.6",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "8060020240329182634.60523a7b",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:rhel_aus:8.6::appstream",
      "cpe:/a:redhat:rhel_e4s:8.6::appstream",
      "cpe:/a:redhat:rhel_tus:8.6::appstream"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.6 Telecommunications Update Service",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "pki-core:10.6",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "8060020240329182634.60523a7b",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:rhel_aus:8.6::appstream",
      "cpe:/a:redhat:rhel_e4s:8.6::appstream",
      "cpe:/a:redhat:rhel_tus:8.6::appstream"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "pki-core:10.6",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "8060020240329182634.60523a7b",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:rhel_aus:8.6::appstream",
      "cpe:/a:redhat:rhel_e4s:8.6::appstream",
      "cpe:/a:redhat:rhel_tus:8.6::appstream"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.8 Extended Update Support",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "pki-core:10.6",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "8080020240329143735.693a3987",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:rhel_eus:8.8::appstream"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "pki-core",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:11.5.0-2.el9_4",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:enterprise_linux:9::appstream"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "pki-core",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:11.0.6-3.el9_0",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:rhel_e4s:9.0::appstream"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9.2 Extended Update Support",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "pki-core",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:11.3.0-2.el9_2",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:rhel_eus:9.2::appstream"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 6",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "pki-core",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:6"
    ]
  }
]

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo
11 Jun 2024 20:15Current
7.8High risk
Vulners AI Score7.8
CVSS37.5
EPSS0.00044
SSVC
CWE-305
dogtag-pkipki-coreldap injectionbypassauthenticationprivilege escalation
44
.json
Report