VDB
BDU:2025-00342
BDU:2025-00342
PUBLISHED
CVSS 7.5 HIGH
Уязвимость пакетов dogtag-pki и pki-core, связанная с обходом аутентификации в силу исходной ошибки, позволяющая нарушителю повысить свои привилегии
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions | 0:11.0.6-3.el9_0 |
| Red Hat | Red Hat Enterprise Linux 8 | 8100020240614102443.82f485b7 |
| Red Hat | Red Hat Enterprise Linux 8.4 Telecommunications Update Service | 8040020240329193548.17df0a3f |
| Red Hat | Red Hat Enterprise Linux 8.8 Extended Update Support | 8080020240329143735.693a3987 |
| Red Hat | Red Hat Enterprise Linux 8.6 Telecommunications Update Service | 8060020240329182634.60523a7b |
| Red Hat | Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support | 8060020240329182634.60523a7b |
| Red Hat | Red Hat Enterprise Linux 7 | 0:10.5.18-32.el7_9 |
| Red Hat | Red Hat Enterprise Linux 9 | 0:11.5.0-2.el9_4 |
| 0 | ||
| Red Hat | Red Hat Enterprise Linux 6 | |
| Red Hat | Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions | 8040020240329193548.17df0a3f |
| Red Hat Inc., Сообщество свободного программного обеспечения, ООО «Ред Софт», ООО «РусБИТех-Астра» | Red Hat Enterprise Linux, Debian GNU/Linux, РЕД ОС (запись в едином реестре российских программ №3751), Astra Linux Special Edition (запись в едином реестре российских программ №369), PKI, Red Hat Certificate System | |
| Red Hat | Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions | 8060020240329182634.60523a7b |
| Red Hat | Red Hat Certificate System 10.4 EUS for RHEL-8 | 8060020240529205458.07fb4edf |
| Red Hat | Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | 8040020240329193548.17df0a3f |
| Red Hat | Red Hat Enterprise Linux 9.2 Extended Update Support | 0:11.3.0-2.el9_2 |
Timeline
- Jun 11, 2024 CVE Published
- Aug 27, 2025 CVE Updated
- May 19, 2026 Distribution Patch
- May 19, 2026 Distribution Patch
- May 19, 2026 Distribution Patch
- May 19, 2026 Distribution Patch
- May 19, 2026 Security Advisory
- May 19, 2026 Security Advisory
- May 19, 2026 Security Advisory
- May 19, 2026 Security Advisory
- May 19, 2026 Distribution Patch
- May 19, 2026 Distribution Patch
References
- https://redos.red-soft.ru/support/secure/ url
- RHSA-2024:4051 vendor-advisory
- RHSA-2024:4164 vendor-advisory
- RHSA-2024:4165 vendor-advisory
- RHSA-2024:4403 vendor-advisory
- https://access.redhat.com/security/cve/CVE-2023-4727 vdb
- RHSA-2024:4070 vendor-advisory
- RHSA-2024:4179 vendor-advisory
- RHSA-2024:4222 vendor-advisory
- RHSA-2024:4367 vendor-advisory
- RHSA-2024:4413 vendor-advisory
- https://access.redhat.com/security/cve/cve-2023-4727 url
- https://security.snyk.io/vuln/SNYK-DEBIANUNSTABLE-DOGTAGPKI-7247318 url
- https://wiki.astralinux.ru/astra-linux-se18-bulletin-2025-0811SE18 url
- https://bugzilla.redhat.com/show_bug.cgi?id=2232218 advisory
- http://repo.red-soft.ru/redos/7.3c/x86_64/updates/ advisory
- https://security-tracker.debian.org/tracker/CVE-2023-4727 advisory