Security Advisory

CVE-2023-4727

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-06-11 19:30:25

Last updated 2025-11-20 07:06:06

Assigner redhat

State PUBLISHED

Description

A flaw was found in dogtag-pki and pki-core. The token authentication scheme can be bypassed with a LDAP injection. By passing the query string parameter sessionID=*, an attacker can authenticate with an existing session saved in the LDAP directory server, which may lead to escalation of privilege.

← Browse all CVEs View on cve.org ↗