Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-4727: A flaw was found in dogtag-pki and pki-core. The token authentication scheme can be bypassed with a LDAP injection. By passing the query string parameter sessionID=*, an attacker can authenticate with an existing session saved in the LDAP directory server, which may lead to escalation of privilege.
Fixed packages 9
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | pki-base | 0:10.5.18-27.amzn2.0.2 |
| Amazon Linux · 2 | pki-base-java | 0:10.5.18-27.amzn2.0.2 |
| Amazon Linux · 2 | pki-ca | 0:10.5.18-27.amzn2.0.2 |
| Amazon Linux · 2 | pki-core-debuginfo | 0:10.5.18-27.amzn2.0.2 |
| Amazon Linux · 2 | pki-javadoc | 0:10.5.18-27.amzn2.0.2 |
| Amazon Linux · 2 | pki-kra | 0:10.5.18-27.amzn2.0.2 |
| Amazon Linux · 2 | pki-server | 0:10.5.18-27.amzn2.0.2 |
| Amazon Linux · 2 | pki-symkey | 0:10.5.18-27.amzn2.0.2 |
| Amazon Linux · 2 | pki-tools | 0:10.5.18-27.amzn2.0.2 |
Vulnerabilities 1
-
High 7.5
Ca: token authentication bypass vulnerability
A flaw was found in dogtag-pki and pki-core. The token authentication scheme can be bypassed with a LDAP injection. By passing the query string parameter sessionID=*, an attacker can authenticate with an existing session saved in the LDAP directory server, wh…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2023-4727.html