CVE-2023-4727

idm-jss: The Public Key Infrastructure (PKI) Core contains fundamental packages required by Red Hat Certificate System. Secur...

CVE-2023-4727 is fixed in 22 products on 1 platform, first by RHSA-2024:4165, released June 27, 2024. It is not reported as exploited. Patch Radar priority: High.

High
CVSS
7.5
Important
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0067
52nd percentile

The Public Key Infrastructure (PKI) Core contains fundamental packages required by Red Hat Certificate System. Security Fix(es): * dogtag ca: token authentication bypass vulnerability (CVE-2023-4727) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Where it's fixed

ProductFixed inFixReleased
Linux
idm-jss · RHEL 8 0:4.11.0-1.module+el8.10.0+21280+cce842b8 RHSA-2024:4367 Jul 8, 2024
idm-jss · almalinux 8 4.11.0-1.module_el8.10.0+3801+17b19a60 ALSA-2024:4367 Jul 8, 2024
idm-jss · ol 8 0:4.11.0-1.module+el8.10.0+90362+5113f0b5 ELSA-2024-4367 Jul 10, 2024
idm-jss-javadoc · RHEL 8 0:4.11.0-1.module+el8.10.0+21280+cce842b8 RHSA-2024:4367 Jul 8, 2024
idm-jss-javadoc · almalinux 8 4.11.0-1.module_el8.10.0+3801+17b19a60 ALSA-2024:4367 Jul 8, 2024
idm-jss-javadoc · ol 8 0:4.11.0-1.module+el8.10.0+90362+5113f0b5 ELSA-2024-4367 Jul 10, 2024
idm-ldapjdk · RHEL 8 0:4.24.0-1.module+el8.10.0+21280+cce842b8 RHSA-2024:4367 Jul 8, 2024
idm-ldapjdk · almalinux 8 4.24.0-1.module_el8.10.0+3801+17b19a60 ALSA-2024:4367 Jul 8, 2024
idm-ldapjdk · ol 8 0:4.24.0-1.module+el8.10.0+90362+5113f0b5 ELSA-2024-4367 Jul 10, 2024
idm-ldapjdk-javadoc · RHEL 8 0:4.24.0-1.module+el8.10.0+21280+cce842b8 RHSA-2024:4367 Jul 8, 2024
idm-ldapjdk-javadoc · almalinux 8 4.24.0-1.module_el8.10.0+3801+17b19a60 ALSA-2024:4367 Jul 8, 2024
idm-ldapjdk-javadoc · ol 8 0:4.24.0-1.module+el8.10.0+90362+5113f0b5 ELSA-2024-4367 Jul 10, 2024
idm-pki-acme · RHEL 8 0:10.15.1-1.module+el8.10.0+21991+2e8cd757 RHSA-2024:4367 Jul 8, 2024
idm-pki-acme · RHEL 9 0:11.5.0-2.el9_4 RHSA-2024:4165 Jun 27, 2024
idm-pki-acme · almalinux 8 10.15.1-1.module_el8.10.0+3868+cdab0fd8 ALSA-2024:4367 Jul 8, 2024
idm-pki-acme · almalinux 9 11.5.0-2.el9_4.alma.1 ALSA-2024:4165 Jun 27, 2024
idm-pki-acme · ol 8 0:10.15.1-1.0.1.module+el8.10.0+90362+5113f0b5 ELSA-2024-4367 Jul 10, 2024
idm-pki-acme · ol 9 0:11.5.0-2.0.1.el9_4 ELSA-2024-4165 Jun 27, 2024
idm-pki-base · RHEL 8 0:10.15.1-1.module+el8.10.0+21991+2e8cd757 RHSA-2024:4367 Jul 8, 2024
idm-pki-base · RHEL 9 0:11.5.0-2.el9_4 RHSA-2024:4165 Jun 27, 2024
idm-pki-base · almalinux 8 10.15.1-1.module_el8.10.0+3868+cdab0fd8 ALSA-2024:4367 Jul 8, 2024
idm-pki-base · almalinux 9 11.5.0-2.el9_4.alma.1 ALSA-2024:4165 Jun 27, 2024
idm-pki-base · ol 8 0:10.15.1-1.0.1.module+el8.10.0+90362+5113f0b5 ELSA-2024-4367 Jul 10, 2024
idm-pki-base · ol 9 0:11.5.0-2.0.1.el9_4 ELSA-2024-4165 Jun 27, 2024
idm-pki-base-java · RHEL 8 0:10.15.1-1.module+el8.10.0+21991+2e8cd757 RHSA-2024:4367 Jul 8, 2024
idm-pki-base-java · almalinux 8 10.15.1-1.module_el8.10.0+3868+cdab0fd8 ALSA-2024:4367 Jul 8, 2024
idm-pki-base-java · ol 8 0:10.15.1-1.0.1.module+el8.10.0+90362+5113f0b5 ELSA-2024-4367 Jul 10, 2024
idm-pki-ca · RHEL 8 0:10.15.1-1.module+el8.10.0+21991+2e8cd757 RHSA-2024:4367 Jul 8, 2024
idm-pki-ca · RHEL 9 0:11.5.0-2.el9_4 RHSA-2024:4165 Jun 27, 2024
idm-pki-ca · almalinux 8 10.15.1-1.module_el8.10.0+3868+cdab0fd8 ALSA-2024:4367 Jul 8, 2024
idm-pki-ca · almalinux 9 11.5.0-2.el9_4.alma.1 ALSA-2024:4165 Jun 27, 2024
idm-pki-ca · ol 8 0:10.15.1-1.0.1.module+el8.10.0+90362+5113f0b5 ELSA-2024-4367 Jul 10, 2024
idm-pki-ca · ol 9 0:11.5.0-2.0.1.el9_4 ELSA-2024-4165 Jun 27, 2024
idm-pki-est · RHEL 9 0:11.5.0-2.el9_4 RHSA-2024:4165 Jun 27, 2024
idm-pki-est · almalinux 9 11.5.0-2.el9_4.alma.1 ALSA-2024:4165 Jun 27, 2024
idm-pki-est · ol 9 0:11.5.0-2.0.1.el9_4 ELSA-2024-4165 Jun 27, 2024
idm-pki-java · RHEL 9 0:11.5.0-2.el9_4 RHSA-2024:4165 Jun 27, 2024
idm-pki-java · almalinux 9 11.5.0-2.el9_4.alma.1 ALSA-2024:4165 Jun 27, 2024
idm-pki-java · ol 9 0:11.5.0-2.0.1.el9_4 ELSA-2024-4165 Jun 27, 2024
idm-pki-kra · RHEL 8 0:10.15.1-1.module+el8.10.0+21991+2e8cd757 RHSA-2024:4367 Jul 8, 2024
idm-pki-kra · RHEL 9 0:11.5.0-2.el9_4 RHSA-2024:4165 Jun 27, 2024
idm-pki-kra · almalinux 8 10.15.1-1.module_el8.10.0+3868+cdab0fd8 ALSA-2024:4367 Jul 8, 2024
idm-pki-kra · almalinux 9 11.5.0-2.el9_4.alma.1 ALSA-2024:4165 Jun 27, 2024
idm-pki-kra · ol 8 0:10.15.1-1.0.1.module+el8.10.0+90362+5113f0b5 ELSA-2024-4367 Jul 10, 2024
idm-pki-kra · ol 9 0:11.5.0-2.0.1.el9_4 ELSA-2024-4165 Jun 27, 2024
idm-pki-server · RHEL 8 0:10.15.1-1.module+el8.10.0+21991+2e8cd757 RHSA-2024:4367 Jul 8, 2024
idm-pki-server · RHEL 9 0:11.5.0-2.el9_4 RHSA-2024:4165 Jun 27, 2024
idm-pki-server · almalinux 8 10.15.1-1.module_el8.10.0+3868+cdab0fd8 ALSA-2024:4367 Jul 8, 2024
idm-pki-server · almalinux 9 11.5.0-2.el9_4.alma.1 ALSA-2024:4165 Jun 27, 2024
idm-pki-server · ol 8 0:10.15.1-1.0.1.module+el8.10.0+90362+5113f0b5 ELSA-2024-4367 Jul 10, 2024
idm-pki-server · ol 9 0:11.5.0-2.0.1.el9_4 ELSA-2024-4165 Jun 27, 2024
idm-pki-symkey · RHEL 8 0:10.15.1-1.module+el8.10.0+21991+2e8cd757 RHSA-2024:4367 Jul 8, 2024
idm-pki-symkey · almalinux 8 10.15.1-1.module_el8.10.0+3868+cdab0fd8 ALSA-2024:4367 Jul 8, 2024
idm-pki-symkey · ol 8 0:10.15.1-1.0.1.module+el8.10.0+90362+5113f0b5 ELSA-2024-4367 Jul 10, 2024
idm-pki-tools · RHEL 8 0:10.15.1-1.module+el8.10.0+21991+2e8cd757 RHSA-2024:4367 Jul 8, 2024
idm-pki-tools · RHEL 9 0:11.5.0-2.el9_4 RHSA-2024:4165 Jun 27, 2024
idm-pki-tools · almalinux 8 10.15.1-1.module_el8.10.0+3868+cdab0fd8 ALSA-2024:4367 Jul 8, 2024
idm-pki-tools · almalinux 9 11.5.0-2.el9_4.alma.1 ALSA-2024:4165 Jun 27, 2024
idm-pki-tools · ol 8 0:10.15.1-1.0.1.module+el8.10.0+90362+5113f0b5 ELSA-2024-4367 Jul 10, 2024
idm-pki-tools · ol 9 0:11.5.0-2.0.1.el9_4 ELSA-2024-4165 Jun 27, 2024
idm-tomcatjss · RHEL 8 0:7.8.0-1.module+el8.10.0+21280+cce842b8 RHSA-2024:4367 Jul 8, 2024
idm-tomcatjss · almalinux 8 7.8.0-1.module_el8.10.0+3801+17b19a60 ALSA-2024:4367 Jul 8, 2024
idm-tomcatjss · ol 8 0:7.8.0-1.module+el8.10.0+90362+5113f0b5 ELSA-2024-4367 Jul 10, 2024
jss · rocky 8 0:4.11.0-1.module+el8.10.0+1816+f1a7c8eb RLSA-2024:4367 May 7, 2025
ldapjdk · rocky 8 0:4.24.0-1.module+el8.10.0+1816+f1a7c8eb RLSA-2024:4367 May 7, 2025
pki-core · rocky 8 0:10.15.1-1.module+el8.10.0+1836+57f0c18f RLSA-2024:4367 May 7, 2025
pki-core · rocky 9 0:11.5.0-2.el9_4 RLSA-2024:4165 Jul 3, 2024
python3-idm-pki · RHEL 8 0:10.15.1-1.module+el8.10.0+21991+2e8cd757 RHSA-2024:4367 Jul 8, 2024
python3-idm-pki · RHEL 9 0:11.5.0-2.el9_4 RHSA-2024:4165 Jun 27, 2024
python3-idm-pki · almalinux 8 10.15.1-1.module_el8.10.0+3868+cdab0fd8 ALSA-2024:4367 Jul 8, 2024
python3-idm-pki · almalinux 9 11.5.0-2.el9_4.alma.1 ALSA-2024:4165 Jun 27, 2024
python3-idm-pki · ol 8 0:10.15.1-1.0.1.module+el8.10.0+90362+5113f0b5 ELSA-2024-4367 Jul 10, 2024
python3-idm-pki · ol 9 0:11.5.0-2.0.1.el9_4 ELSA-2024-4165 Jun 27, 2024
resteasy · RHEL 8 0:3.0.26-7.module+el8.10.0+21132+79720f4e RHSA-2024:4367 Jul 8, 2024
resteasy · almalinux 8 3.0.26-7.module_el8.10.0+3808+9d4ab1fb ALSA-2024:4367 Jul 8, 2024
resteasy · ol 8 0:3.0.26-7.module+el8.10.0+90362+5113f0b5 ELSA-2024-4367 Jul 10, 2024
resteasy · rocky 8 0:3.0.26-7.module+el8.10.0+1767+f923f786 RLSA-2024:4367 May 7, 2025
resteasy-javadoc · RHEL 8 0:3.0.26-7.module+el8.10.0+21132+79720f4e RHSA-2024:4367 Jul 8, 2024
resteasy-javadoc · almalinux 8 3.0.26-7.module_el8.10.0+3808+9d4ab1fb ALSA-2024:4367 Jul 8, 2024
resteasy-javadoc · ol 8 0:3.0.26-7.module+el8.10.0+90362+5113f0b5 ELSA-2024-4367 Jul 10, 2024
tomcatjss · rocky 8 0:7.8.0-1.module+el8.10.0+1816+f1a7c8eb RLSA-2024:4367 May 7, 2025

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.