https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 20:59:39 +0000 https://cve.radiocsirt.org/vuln/alsa-2024:4165 <p><strong>Affected:</strong> AlmaLinux:9: idm-pki-acme, AlmaLinux:9: idm-pki-base, AlmaLinux:9: idm-pki-ca, AlmaLinux:9: idm-pki-est, AlmaLinux:9: idm-pki-java, AlmaLinux:9: idm-pki-kra, AlmaLinux:9: idm-pki-server, AlmaLinux:9: idm-pki-tools, AlmaLinux:9: python3-idm-pki</p> <p>The Public Key Infrastructure (PKI) Core contains fundamental packages required by AlmaLinux Certificate System.</p> <p>Security Fix(es):</p> <p>* dogtag ca: token authentication bypass vulnerability (CVE-2023-4727)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:9: idm-pki-acme, AlmaLinux:9: idm-pki-base, AlmaLinux:9: idm-pki-ca, AlmaLinux:9: idm-pki-est, AlmaLinux:9: idm-pki-java, AlmaLinux:9: idm-pki-kra, AlmaLinux:9: idm-pki-server, AlmaLinux:9: idm-pki-tools, AlmaLinux:9: python3-idm-pki</p> <p>The Public Key Infrastructure (PKI) Core contains fundamental packages required by AlmaLinux Certificate System.</p> <p>Security Fix(es):</p> <p>* dogtag ca: token authentication bypass vulnerability (CVE-2023-4727)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2024:4165 https://cve.radiocsirt.org/vuln/bdu:2025-00342 bdu:2025-00342 https://cve.radiocsirt.org/vuln/bdu:2025-00342 https://cve.radiocsirt.org/vuln/euvd-2026-330505 EUVD-2026-330505 https://cve.radiocsirt.org/vuln/euvd-2026-330505 https://cve.radiocsirt.org/vuln/fkie_cve-2023-4727 <p>A flaw was found in dogtag-pki and pki-core. The token authentication scheme can be bypassed with a LDAP injection. By passing the query string parameter sessionID=*, an attacker can authenticate with an existing session saved in the LDAP directory server, which may lead to escalation of privilege.</p> <p>A flaw was found in dogtag-pki and pki-core. The token authentication scheme can be bypassed with a LDAP injection. By passing the query string parameter sessionID=*, an attacker can authenticate with an existing session saved in the LDAP directory server, which may lead to escalation of privilege.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-4727 https://cve.radiocsirt.org/vuln/ghsa-rvm7-rc5g-c98q <p>A flaw was found in dogtag-pki and pki-core. The token authentication scheme can be bypassed with a LDAP injection. By passing the query string parameter sessionID=*, an attacker can authenticate with an existing session saved in the LDAP directory server, which may lead to escalation of privilege.</p> <p>A flaw was found in dogtag-pki and pki-core. The token authentication scheme can be bypassed with a LDAP injection. By passing the query string parameter sessionID=*, an attacker can authenticate with an existing session saved in the LDAP directory server, which may lead to escalation of privilege.</p> https://cve.radiocsirt.org/vuln/ghsa-rvm7-rc5g-c98q https://cve.radiocsirt.org/vuln/gsd-2023-4727 gsd-2023-4727 https://cve.radiocsirt.org/vuln/gsd-2023-4727 https://cve.radiocsirt.org/vuln/oesa-2025-1238 <p><strong>Affected:</strong> openEuler:24.03-LTS: pki-core</p> <p>Dogtag PKI is a designed enterprise software system manage enterprise Public Key Infrastructure deployments. Security Fix(es):</p> <p>A flaw was found in dogtag-pki and pki-core. The token authentication scheme can be bypassed with a LDAP injection. By passing the query string parameter sessionID=*, an attacker can authenticate with an existing session saved in the LDAP directory server, which may lead to escalation of privilege.(CVE-2023-4727)</p> <p><strong>Affected:</strong> openEuler:24.03-LTS: pki-core</p> <p>Dogtag PKI is a designed enterprise software system manage enterprise Public Key Infrastructure deployments. Security Fix(es):</p> <p>A flaw was found in dogtag-pki and pki-core. The token authentication scheme can be bypassed with a LDAP injection. By passing the query string parameter sessionID=*, an attacker can authenticate with an existing session saved in the LDAP directory server, which may lead to escalation of privilege.(CVE-2023-4727)</p> https://cve.radiocsirt.org/vuln/oesa-2025-1238 https://cve.radiocsirt.org/vuln/rhsa-2024:4051 <p>ca: token authentication bypass vulnerability</p> <p>ca: token authentication bypass vulnerability</p> https://cve.radiocsirt.org/vuln/rhsa-2024:4051 https://cve.radiocsirt.org/vuln/rhsa-2024:4165 <p>ca: token authentication bypass vulnerability</p> <p>ca: token authentication bypass vulnerability</p> https://cve.radiocsirt.org/vuln/rhsa-2024:4165 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-4727 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: dogtag-pki, Ubuntu:Pro:18.04:LTS: dogtag-pki, Ubuntu:Pro:20.04:LTS: dogtag-pki, Ubuntu:Pro:22.04:LTS: dogtag-pki</p> <p>A flaw was found in dogtag-pki and pki-core. The token authentication scheme can be bypassed with a LDAP injection. By passing the query string parameter sessionID=*, an attacker can authenticate with an existing session saved in the LDAP directory server, which may lead to escalation of privilege.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: dogtag-pki, Ubuntu:Pro:18.04:LTS: dogtag-pki, Ubuntu:Pro:20.04:LTS: dogtag-pki, Ubuntu:Pro:22.04:LTS: dogtag-pki</p> <p>A flaw was found in dogtag-pki and pki-core. The token authentication scheme can be bypassed with a LDAP injection. By passing the query string parameter sessionID=*, an attacker can authenticate with an existing session saved in the LDAP directory server, which may lead to escalation of privilege.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-4727 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1434 <p>Ein entfernter Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um Sicherheitsmaßnahmen zu umgehen oder einen Denial-of-Service-Zustand zu verursachen.</p> <p>Ein entfernter Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um Sicherheitsmaßnahmen zu umgehen oder einen Denial-of-Service-Zustand zu verursachen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1434