A flaw was found in dogtag-pki and pki-core. The token authentication scheme can be bypassed with a LDAP injection. By passing the query string parameter sessionID=*, an attacker can authenticate with an existing session saved in the LDAP directory server, which may lead to escalation of privilege.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade resteasyUpgrade idm-pki-toolsUpgrade idm-pki-baseUpgrade resteasy-javadocUpgrade idm-tomcatjssUpgrade idm-pki-symkeyUpgrade idm-pki-serverUpgrade idm-pki-javaUpgrade idm-pki-kraUpgrade idm-pki-base-javaUpgrade idm-jss-javadocUpgrade idm-pki-estUpgrade python3-idm-pkiUpgrade idm-pki-acmeUpgrade idm-ldapjdk-javadocUpgrade idm-ldapjdkUpgrade idm-pki-caUpgrade idm-jss | Jun 28, 2024 | Jun 11, 2024 |
| Amazon Linux Ami 2 | — | Upgrade pki-base-javaUpgrade pki-baseUpgrade pki-core-debuginfoUpgrade pki-toolsUpgrade pki-serverUpgrade pki-symkeyUpgrade pki-caUpgrade pki-javadocUpgrade pki-kra | Jul 12, 2024 | Jun 11, 2024 |
| Debian | — | No solution exists | May 15, 2025 | Jun 11, 2024 |
| Oracle_linux | — | Upgrade pki-kraUpgrade idm-pki-base-javaUpgrade idm-pki-acmeUpgrade idm-pki-javaUpgrade idm-pki-kraUpgrade resteasy-javadocUpgrade idm-jssUpgrade resteasyUpgrade pki-symkeyUpgrade idm-ldapjdk-javadocUpgrade idm-ldapjdkUpgrade python3-idm-pkiUpgrade pki-javadocUpgrade idm-pki-toolsUpgrade idm-jss-javadocUpgrade pki-serverUpgrade idm-tomcatjssUpgrade pki-toolsUpgrade idm-pki-caUpgrade idm-pki-serverUpgrade pki-base-javaUpgrade idm-pki-estUpgrade idm-pki-symkeyUpgrade pki-baseUpgrade pki-caUpgrade idm-pki-base | Jun 28, 2024 | Jun 11, 2024 |
| Redhat_linux | — | Upgrade idm-pki-caUpgrade pki-toolsUpgrade pki-symkeyUpgrade pki-caUpgrade idm-pki-serverUpgrade idm-pki-tools-debuginfoUpgrade pki-kraUpgrade idm-pki-estUpgrade pki-core-debuginfoUpgrade idm-pki-kraUpgrade pki-baseUpgrade pki-base-javaUpgrade idm-pki-toolsUpgrade idm-pki-javaUpgrade idm-pki-acmeNo solution existsUpgrade idm-pki-baseUpgrade pki-serverUpgrade pki-core-debugsourceUpgrade pki-javadocUpgrade python3-idm-pki | Jun 26, 2024 | Jun 11, 2024 |
| Rocky_linux | — | Upgrade idm-jss-javadocUpgrade idm-pki-toolsUpgrade idm-jss-debuginfoUpgrade idm-pki-symkeyUpgrade idm-jssUpgrade pki-core-debugsourceUpgrade pki-core-debuginfoUpgrade idm-pki-symkey-debuginfoUpgrade idm-pki-tools-debuginfoUpgrade jss-debugsource | Jul 4, 2024 | Jun 11, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub