💣Exploit CVE-2023-4727 - A flaw was found in dogtag-pki and pki-core. The t

[Maksim]

CVE ID : CVE-2023-4727
Published : June 11, 2024, 8:15 p.m. | 2 hours, 6 minutes ago
Description : A flaw was found in dogtag-pki and pki-core. The token authentication scheme can be bypassed with a LDAP injection. By passing the query string parameter sessionID=*, an attacker can authenticate with an existing session saved in the LDAP directory server, which may lead to escalation of privilege.
Severity: 7.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
Full story here:

To view the content, you need to Sign In or Register.