Red Hat Certificate System 10.4 EUS for RHEL-8: Authentication Bypass by Primary Weakness

What to do

1. Check which version of Red Hat Certificate System 10.4 EUS for RHEL-8 you run against the affected versions below, and install the vendor's latest release.
2. Read the advisory on github.com for workarounds and exact fixed builds.

Affected products and versions

Version data comes from the organisation that assigned the CVE. Confirm against the vendor advisory before deciding you are unaffected.

How the severity score breaks down

Attack vector

AdjacentThe attacker must be on the same local network segment.

Attack complexity

HighSuccess depends on conditions outside the attacker's control.

Privileges required

NoneNo account or login is needed.

User interaction

NoneNo action by a victim is required.

Scope

UnchangedImpact stays within the vulnerable component.

Confidentiality

HighAll data handled by the component can be read.

Integrity

HighData or code can be modified at will.

Availability

HighThe component can be taken down completely.

Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H. Scored by CNA (redhat.com).

Official description

A flaw was found in dogtag-pki and pki-core. The token authentication scheme can be bypassed with a LDAP injection. By passing the query string parameter sessionID=*, an attacker can authenticate with an existing session saved in the LDAP directory server, which may lead to escalation of privilege.

Source: the CVE record as published by its numbering authority, via NVD and CVE.org.

The underlying weakness: Authentication Bypass by Primary Weakness

Timeline

1. June 11, 2024CVE record published.
2. June 11, 2024CISA published its SSVC assessment (exploitation: none, automatable: no, technical impact: total).
3. November 7, 2026Record last changed materially (score, affected products, status or references).

References

Recent Authentication Bypass by Primary Weakness vulnerabilities

• 7.3 High severity

  mantisbt: Authentication Bypass by Primary Weakness

  CVE-2024-34077May 14, 2024MantisbtEPSS 1.19%
• 7.5 High severity

  Cisco IP Phones with Multiplatform Firmware: Authentication Bypass by Primary Weakness

  CVE-2024-20378May 1, 2024Cisco
• 9.8 Critical severity

  TeoBASE: Authentication Bypass by Primary Weakness

  CVE-2023-6153Mar 27, 2024TeoSOFT Software
• 9.8 Critical severity

  Octopod: Authentication Bypass by Primary Weakness

  CVE-2024-1202Mar 21, 2024XPodas
• 9.8 Critical severity

  UFace 5: Authentication Bypass by Primary Weakness

  CVE-2023-7103Mar 5, 2024ZKSoftware Biometric Security Solutions
• 9.8 Critical severity

  OpenEdge: Authentication Bypass by Primary Weakness

  CVE-2024-1403Feb 27, 2024Progress SoftwareEPSS 3.3%

Spotted an error? Tell us.