CVE-2023-4727

highPriorität · verfolgen · 0EPSS 0.007 · 52. PerzentilDEEURUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

0.66% (52nd) EPSS

CVSS 7.5 · high

Is it mine?

74 products

Prüfe deine Angriffsfläche

Who says so?

5 sources

cnnvd · enisa_euvd · fstec_bdu · cert_bund

EPSS · bewertet 2026-10-27

A flaw was found in dogtag-pki and pki-core. The token authentication scheme can be bypassed with a LDAP injection. By passing the query string parameter sessionID=*, an attacker can authenticate with an existing session saved in the LDAP directory server, which may lead to escalation of privilege.

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

Behobenidm-console-framework-0:1.3.0-1.module+el8pki+14677+1ef79a68.noarch (redhat-pki:10) as a component of Red Hat Certificate System 10.4 EUS for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4070
Behobenidm-console-framework-0:1.3.0-1.module+el8pki+14677+1ef79a68.src (redhat-pki:10) as a component of Red Hat Certificate System 10.4 EUS for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4070
Behobenjss-0:4.9.10-1.module+el8pki+21949+4b2d0700.src (redhat-pki:10) as a component of Red Hat Certificate System 10.4 EUS for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4070
Behobenjss-0:4.9.10-1.module+el8pki+21949+4b2d0700.x86_64 (redhat-pki:10) as a component of Red Hat Certificate System 10.4 EUS for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4070
Behobenjss-debuginfo-0:4.9.10-1.module+el8pki+21949+4b2d0700.x86_64 (redhat-pki:10) as a component of Red Hat Certificate System 10.4 EUS for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4070
Behobenjss-debugsource-0:4.9.10-1.module+el8pki+21949+4b2d0700.x86_64 (redhat-pki:10) as a component of Red Hat Certificate System 10.4 EUS for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4070
Behobenjss-javadoc-0:4.9.10-1.module+el8pki+21949+4b2d0700.x86_64 (redhat-pki:10) as a component of Red Hat Certificate System 10.4 EUS for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4070
Behobenldapjdk-0:4.23.0-1.module+el8pki+14677+1ef79a68.noarch (redhat-pki:10) as a component of Red Hat Certificate System 10.4 EUS for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4070
Behobenldapjdk-0:4.23.0-1.module+el8pki+14677+1ef79a68.src (redhat-pki:10) as a component of Red Hat Certificate System 10.4 EUS for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4070
Behobenldapjdk-javadoc-0:4.23.0-1.module+el8pki+14677+1ef79a68.noarch (redhat-pki:10) as a component of Red Hat Certificate System 10.4 EUS for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4070
Behobenpython3-redhat-pki-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch (redhat-pki:10) as a component of Red Hat Certificate System 10.4 EUS for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4070
Behobenredhat-pki-0:10.13.11-1.module+el8pki+21949+4b2d0700.src (redhat-pki:10) as a component of Red Hat Certificate System 10.4 EUS for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4070
Behobenredhat-pki-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64 (redhat-pki:10) as a component of Red Hat Certificate System 10.4 EUS for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4070
Behobenredhat-pki-acme-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch (redhat-pki:10) as a component of Red Hat Certificate System 10.4 EUS for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4070
Behobenredhat-pki-base-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch (redhat-pki:10) as a component of Red Hat Certificate System 10.4 EUS for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4070
Behobenredhat-pki-base-java-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch (redhat-pki:10) as a component of Red Hat Certificate System 10.4 EUS for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4070
Behobenredhat-pki-ca-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch (redhat-pki:10) as a component of Red Hat Certificate System 10.4 EUS for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4070
Behobenredhat-pki-console-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch (redhat-pki:10) as a component of Red Hat Certificate System 10.4 EUS for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4070
Behobenredhat-pki-console-theme-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch (redhat-pki:10) as a component of Red Hat Certificate System 10.4 EUS for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4070
Behobenredhat-pki-debuginfo-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64 (redhat-pki:10) as a component of Red Hat Certificate System 10.4 EUS for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4070
Behobenredhat-pki-debugsource-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64 (redhat-pki:10) as a component of Red Hat Certificate System 10.4 EUS for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4070
Behobenredhat-pki-est-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch (redhat-pki:10) as a component of Red Hat Certificate System 10.4 EUS for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4070
Behobenredhat-pki-javadoc-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch (redhat-pki:10) as a component of Red Hat Certificate System 10.4 EUS for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4070
Behobenredhat-pki-kra-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch (redhat-pki:10) as a component of Red Hat Certificate System 10.4 EUS for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4070
Behobenredhat-pki-ocsp-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch (redhat-pki:10) as a component of Red Hat Certificate System 10.4 EUS for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4070
Behobenredhat-pki-server-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch (redhat-pki:10) as a component of Red Hat Certificate System 10.4 EUS for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4070
Behobenredhat-pki-server-theme-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch (redhat-pki:10) as a component of Red Hat Certificate System 10.4 EUS for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4070
Behobenredhat-pki-symkey-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64 (redhat-pki:10) as a component of Red Hat Certificate System 10.4 EUS for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4070
Behobenredhat-pki-symkey-debuginfo-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64 (redhat-pki:10) as a component of Red Hat Certificate System 10.4 EUS for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4070
Behobenredhat-pki-tks-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch (redhat-pki:10) as a component of Red Hat Certificate System 10.4 EUS for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4070
Behobenredhat-pki-tools-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64 (redhat-pki:10) as a component of Red Hat Certificate System 10.4 EUS for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4070
Behobenredhat-pki-tools-debuginfo-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64 (redhat-pki:10) as a component of Red Hat Certificate System 10.4 EUS for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4070
Behobenredhat-pki-tps-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64 (redhat-pki:10) as a component of Red Hat Certificate System 10.4 EUS for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4070
Behobenredhat-pki-tps-debuginfo-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64 (redhat-pki:10) as a component of Red Hat Certificate System 10.4 EUS for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4070
Behobentomcatjss-0:7.7.4-1.module+el8pki+21738+33a5e23b.noarch (redhat-pki:10) as a component of Red Hat Certificate System 10.4 EUS for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4070
Behobentomcatjss-0:7.7.4-1.module+el8pki+21738+33a5e23b.src (redhat-pki:10) as a component of Red Hat Certificate System 10.4 EUS for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4070

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

7.5

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 6.9–7.5

v3.17.5highAV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU

v3.17.5highCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · ENISA EU

v3.17.5highCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · secalert@redhat.com USAusnutzbarkeit 1.6 · Auswirkung 5.9

v3.16.9mediumCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)

v3.17.5highCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · Red Hat Product Security US

SSVC

Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.

Exploitation: none · Automatable: no · Technical Impact: totalcoordinatorcisa_ssvcUS

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-305USCWE-305USCWE-305US

betroffene Produkte (74)

Betroffene Produkte und Versionsbereiche.

Amazon Linux 2alle Versionencert_bundDEcpe:/o:amazon:linux_2:-
OTRS OTRS SaaS platform <2024-07alle Versionencert_bundDE
Oracle Linuxalle Versionencert_bundDEcpe:/o:oracle:linux:-
RESF Rocky Linuxalle Versionencert_bundDEcpe:/o:resf:rocky_linux:-
Red Hat Enterprise Linuxalle Versionencert_bundDEcpe:/o:redhat:enterprise_linux:-
Red Hat Enterprise Linux 9alle Versionencert_bundDEcpe:/o:redhat:enterprise_linux:9
Red Hat Enterprise Linux 9.2alle Versionencert_bundDEcpe:/o:redhat:enterprise_linux:9.2
OTRS OTRS≤ SaaS platform <2024-07cert_bundDE
Red Hat Red Hat Certificate System 10.4 EUS for RHEL-8< 8060020240529205458.07fb4edfenisa_euvdEU
Red Hat Red Hat Enterprise Linux 7< 0:10.5.18-32.el7_9enisa_euvdEU
Red Hat Red Hat Enterprise Linux 8< 8100020240614102443.82f485b7enisa_euvdEU
Red Hat Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support< 8040020240329193548.17df0a3fenisa_euvdEU
Red Hat Red Hat Enterprise Linux 8.4 Telecommunications Update Service< 8040020240329193548.17df0a3fenisa_euvdEU
Red Hat Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions< 8040020240329193548.17df0a3fenisa_euvdEU
Red Hat Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support< 8060020240329182634.60523a7benisa_euvdEU
Red Hat Red Hat Enterprise Linux 8.6 Telecommunications Update Service< 8060020240329182634.60523a7benisa_euvdEU
Red Hat Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions< 8060020240329182634.60523a7benisa_euvdEU
Red Hat Red Hat Enterprise Linux 8.8 Extended Update Support< 8080020240329143735.693a3987enisa_euvdEU
Red Hat Red Hat Enterprise Linux 9< 0:11.5.0-2.el9_4enisa_euvdEU
Red Hat Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions< 0:11.0.6-3.el9_0enisa_euvdEU

20 von 74 angezeigt

Advisories (2)

Hersteller- und Ökosystem-Meldungen dazu.

RHSA-2024:4070Red Hat Security Advisory: Red Hat Certificate System 10.4 for RHEL 8 security and bug fix update2024-06-24csaf · redhat_csafUS
An update for pki-core is now available for Red Hat Certificate System 10.4 for RHEL 8.6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link in the References section.
WID-SEC-W-2024-1434Red Hat Enterprise Linux (pki and Libreswan): Mehrere SchwachstellenDeutsch2024-06-23csaf · cert_bundDE
Ein entfernter Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um Sicherheitsmaßnahmen zu umgehen oder einen Denial-of-Service-Zustand zu verursachen.

auch bekannt als (4)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd fstec_bdu cert_bund redhat_csaf NVD CVE.org MITRE

veröffentlicht 2024-06-11geändert 2026-06-26

Referenzen (34)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan