# CVE-2023-4727: idm-jss: The Public Key Infrastructure (PKI) Core contains fundamental packages required by Red Hat Certificate System.  Secur...

CVE-2023-4727 is fixed in 22 products on 1 platform, first by RHSA-2024:4165, released June 27, 2024. It is not reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/cve/CVE-2023-4727
- Priority: High
- CVSS: 7.5 (Important)
- EPSS: 0.0067
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Jun 27, 2024

## Description

The Public Key Infrastructure (PKI) Core contains fundamental packages required by Red Hat Certificate System.  Security Fix(es):  * dogtag ca: token authentication bypass vulnerability (CVE-2023-4727)  For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | idm-jss RHEL 8 | 0:4.11.0-1.module+el8.10.0+21280+cce842b8 | [RHSA-2024:4367](https://patchblox.com/security/data/fix/linux/rhsa-2024-4367.md) | Jul 8, 2024 |
| Linux | idm-jss almalinux 8 | 4.11.0-1.module_el8.10.0+3801+17b19a60 | [ALSA-2024:4367](https://patchblox.com/security/data/fix/linux/alsa-2024-4367.md) | Jul 8, 2024 |
| Linux | idm-jss ol 8 | 0:4.11.0-1.module+el8.10.0+90362+5113f0b5 | [ELSA-2024-4367](https://patchblox.com/security/data/fix/linux/elsa-2024-4367.md) | Jul 10, 2024 |
| Linux | idm-jss-javadoc RHEL 8 | 0:4.11.0-1.module+el8.10.0+21280+cce842b8 | [RHSA-2024:4367](https://patchblox.com/security/data/fix/linux/rhsa-2024-4367.md) | Jul 8, 2024 |
| Linux | idm-jss-javadoc almalinux 8 | 4.11.0-1.module_el8.10.0+3801+17b19a60 | [ALSA-2024:4367](https://patchblox.com/security/data/fix/linux/alsa-2024-4367.md) | Jul 8, 2024 |
| Linux | idm-jss-javadoc ol 8 | 0:4.11.0-1.module+el8.10.0+90362+5113f0b5 | [ELSA-2024-4367](https://patchblox.com/security/data/fix/linux/elsa-2024-4367.md) | Jul 10, 2024 |
| Linux | idm-ldapjdk RHEL 8 | 0:4.24.0-1.module+el8.10.0+21280+cce842b8 | [RHSA-2024:4367](https://patchblox.com/security/data/fix/linux/rhsa-2024-4367.md) | Jul 8, 2024 |
| Linux | idm-ldapjdk almalinux 8 | 4.24.0-1.module_el8.10.0+3801+17b19a60 | [ALSA-2024:4367](https://patchblox.com/security/data/fix/linux/alsa-2024-4367.md) | Jul 8, 2024 |
| Linux | idm-ldapjdk ol 8 | 0:4.24.0-1.module+el8.10.0+90362+5113f0b5 | [ELSA-2024-4367](https://patchblox.com/security/data/fix/linux/elsa-2024-4367.md) | Jul 10, 2024 |
| Linux | idm-ldapjdk-javadoc RHEL 8 | 0:4.24.0-1.module+el8.10.0+21280+cce842b8 | [RHSA-2024:4367](https://patchblox.com/security/data/fix/linux/rhsa-2024-4367.md) | Jul 8, 2024 |
| Linux | idm-ldapjdk-javadoc almalinux 8 | 4.24.0-1.module_el8.10.0+3801+17b19a60 | [ALSA-2024:4367](https://patchblox.com/security/data/fix/linux/alsa-2024-4367.md) | Jul 8, 2024 |
| Linux | idm-ldapjdk-javadoc ol 8 | 0:4.24.0-1.module+el8.10.0+90362+5113f0b5 | [ELSA-2024-4367](https://patchblox.com/security/data/fix/linux/elsa-2024-4367.md) | Jul 10, 2024 |
| Linux | idm-pki-acme RHEL 8 | 0:10.15.1-1.module+el8.10.0+21991+2e8cd757 | [RHSA-2024:4367](https://patchblox.com/security/data/fix/linux/rhsa-2024-4367.md) | Jul 8, 2024 |
| Linux | idm-pki-acme RHEL 9 | 0:11.5.0-2.el9_4 | [RHSA-2024:4165](https://patchblox.com/security/data/fix/linux/rhsa-2024-4165.md) | Jun 27, 2024 |
| Linux | idm-pki-acme almalinux 8 | 10.15.1-1.module_el8.10.0+3868+cdab0fd8 | [ALSA-2024:4367](https://patchblox.com/security/data/fix/linux/alsa-2024-4367.md) | Jul 8, 2024 |
| Linux | idm-pki-acme almalinux 9 | 11.5.0-2.el9_4.alma.1 | [ALSA-2024:4165](https://patchblox.com/security/data/fix/linux/alsa-2024-4165.md) | Jun 27, 2024 |
| Linux | idm-pki-acme ol 8 | 0:10.15.1-1.0.1.module+el8.10.0+90362+5113f0b5 | [ELSA-2024-4367](https://patchblox.com/security/data/fix/linux/elsa-2024-4367.md) | Jul 10, 2024 |
| Linux | idm-pki-acme ol 9 | 0:11.5.0-2.0.1.el9_4 | [ELSA-2024-4165](https://patchblox.com/security/data/fix/linux/elsa-2024-4165.md) | Jun 27, 2024 |
| Linux | idm-pki-base RHEL 8 | 0:10.15.1-1.module+el8.10.0+21991+2e8cd757 | [RHSA-2024:4367](https://patchblox.com/security/data/fix/linux/rhsa-2024-4367.md) | Jul 8, 2024 |
| Linux | idm-pki-base RHEL 9 | 0:11.5.0-2.el9_4 | [RHSA-2024:4165](https://patchblox.com/security/data/fix/linux/rhsa-2024-4165.md) | Jun 27, 2024 |
| Linux | idm-pki-base almalinux 8 | 10.15.1-1.module_el8.10.0+3868+cdab0fd8 | [ALSA-2024:4367](https://patchblox.com/security/data/fix/linux/alsa-2024-4367.md) | Jul 8, 2024 |
| Linux | idm-pki-base almalinux 9 | 11.5.0-2.el9_4.alma.1 | [ALSA-2024:4165](https://patchblox.com/security/data/fix/linux/alsa-2024-4165.md) | Jun 27, 2024 |
| Linux | idm-pki-base ol 8 | 0:10.15.1-1.0.1.module+el8.10.0+90362+5113f0b5 | [ELSA-2024-4367](https://patchblox.com/security/data/fix/linux/elsa-2024-4367.md) | Jul 10, 2024 |
| Linux | idm-pki-base ol 9 | 0:11.5.0-2.0.1.el9_4 | [ELSA-2024-4165](https://patchblox.com/security/data/fix/linux/elsa-2024-4165.md) | Jun 27, 2024 |
| Linux | idm-pki-base-java RHEL 8 | 0:10.15.1-1.module+el8.10.0+21991+2e8cd757 | [RHSA-2024:4367](https://patchblox.com/security/data/fix/linux/rhsa-2024-4367.md) | Jul 8, 2024 |
| Linux | idm-pki-base-java almalinux 8 | 10.15.1-1.module_el8.10.0+3868+cdab0fd8 | [ALSA-2024:4367](https://patchblox.com/security/data/fix/linux/alsa-2024-4367.md) | Jul 8, 2024 |
| Linux | idm-pki-base-java ol 8 | 0:10.15.1-1.0.1.module+el8.10.0+90362+5113f0b5 | [ELSA-2024-4367](https://patchblox.com/security/data/fix/linux/elsa-2024-4367.md) | Jul 10, 2024 |
| Linux | idm-pki-ca RHEL 8 | 0:10.15.1-1.module+el8.10.0+21991+2e8cd757 | [RHSA-2024:4367](https://patchblox.com/security/data/fix/linux/rhsa-2024-4367.md) | Jul 8, 2024 |
| Linux | idm-pki-ca RHEL 9 | 0:11.5.0-2.el9_4 | [RHSA-2024:4165](https://patchblox.com/security/data/fix/linux/rhsa-2024-4165.md) | Jun 27, 2024 |
| Linux | idm-pki-ca almalinux 8 | 10.15.1-1.module_el8.10.0+3868+cdab0fd8 | [ALSA-2024:4367](https://patchblox.com/security/data/fix/linux/alsa-2024-4367.md) | Jul 8, 2024 |
| Linux | idm-pki-ca almalinux 9 | 11.5.0-2.el9_4.alma.1 | [ALSA-2024:4165](https://patchblox.com/security/data/fix/linux/alsa-2024-4165.md) | Jun 27, 2024 |
| Linux | idm-pki-ca ol 8 | 0:10.15.1-1.0.1.module+el8.10.0+90362+5113f0b5 | [ELSA-2024-4367](https://patchblox.com/security/data/fix/linux/elsa-2024-4367.md) | Jul 10, 2024 |
| Linux | idm-pki-ca ol 9 | 0:11.5.0-2.0.1.el9_4 | [ELSA-2024-4165](https://patchblox.com/security/data/fix/linux/elsa-2024-4165.md) | Jun 27, 2024 |
| Linux | idm-pki-est RHEL 9 | 0:11.5.0-2.el9_4 | [RHSA-2024:4165](https://patchblox.com/security/data/fix/linux/rhsa-2024-4165.md) | Jun 27, 2024 |
| Linux | idm-pki-est almalinux 9 | 11.5.0-2.el9_4.alma.1 | [ALSA-2024:4165](https://patchblox.com/security/data/fix/linux/alsa-2024-4165.md) | Jun 27, 2024 |
| Linux | idm-pki-est ol 9 | 0:11.5.0-2.0.1.el9_4 | [ELSA-2024-4165](https://patchblox.com/security/data/fix/linux/elsa-2024-4165.md) | Jun 27, 2024 |
| Linux | idm-pki-java RHEL 9 | 0:11.5.0-2.el9_4 | [RHSA-2024:4165](https://patchblox.com/security/data/fix/linux/rhsa-2024-4165.md) | Jun 27, 2024 |
| Linux | idm-pki-java almalinux 9 | 11.5.0-2.el9_4.alma.1 | [ALSA-2024:4165](https://patchblox.com/security/data/fix/linux/alsa-2024-4165.md) | Jun 27, 2024 |
| Linux | idm-pki-java ol 9 | 0:11.5.0-2.0.1.el9_4 | [ELSA-2024-4165](https://patchblox.com/security/data/fix/linux/elsa-2024-4165.md) | Jun 27, 2024 |
| Linux | idm-pki-kra RHEL 8 | 0:10.15.1-1.module+el8.10.0+21991+2e8cd757 | [RHSA-2024:4367](https://patchblox.com/security/data/fix/linux/rhsa-2024-4367.md) | Jul 8, 2024 |
| Linux | idm-pki-kra RHEL 9 | 0:11.5.0-2.el9_4 | [RHSA-2024:4165](https://patchblox.com/security/data/fix/linux/rhsa-2024-4165.md) | Jun 27, 2024 |
| Linux | idm-pki-kra almalinux 8 | 10.15.1-1.module_el8.10.0+3868+cdab0fd8 | [ALSA-2024:4367](https://patchblox.com/security/data/fix/linux/alsa-2024-4367.md) | Jul 8, 2024 |
| Linux | idm-pki-kra almalinux 9 | 11.5.0-2.el9_4.alma.1 | [ALSA-2024:4165](https://patchblox.com/security/data/fix/linux/alsa-2024-4165.md) | Jun 27, 2024 |
| Linux | idm-pki-kra ol 8 | 0:10.15.1-1.0.1.module+el8.10.0+90362+5113f0b5 | [ELSA-2024-4367](https://patchblox.com/security/data/fix/linux/elsa-2024-4367.md) | Jul 10, 2024 |
| Linux | idm-pki-kra ol 9 | 0:11.5.0-2.0.1.el9_4 | [ELSA-2024-4165](https://patchblox.com/security/data/fix/linux/elsa-2024-4165.md) | Jun 27, 2024 |
| Linux | idm-pki-server RHEL 8 | 0:10.15.1-1.module+el8.10.0+21991+2e8cd757 | [RHSA-2024:4367](https://patchblox.com/security/data/fix/linux/rhsa-2024-4367.md) | Jul 8, 2024 |
| Linux | idm-pki-server RHEL 9 | 0:11.5.0-2.el9_4 | [RHSA-2024:4165](https://patchblox.com/security/data/fix/linux/rhsa-2024-4165.md) | Jun 27, 2024 |
| Linux | idm-pki-server almalinux 8 | 10.15.1-1.module_el8.10.0+3868+cdab0fd8 | [ALSA-2024:4367](https://patchblox.com/security/data/fix/linux/alsa-2024-4367.md) | Jul 8, 2024 |
| Linux | idm-pki-server almalinux 9 | 11.5.0-2.el9_4.alma.1 | [ALSA-2024:4165](https://patchblox.com/security/data/fix/linux/alsa-2024-4165.md) | Jun 27, 2024 |
| Linux | idm-pki-server ol 8 | 0:10.15.1-1.0.1.module+el8.10.0+90362+5113f0b5 | [ELSA-2024-4367](https://patchblox.com/security/data/fix/linux/elsa-2024-4367.md) | Jul 10, 2024 |
| Linux | idm-pki-server ol 9 | 0:11.5.0-2.0.1.el9_4 | [ELSA-2024-4165](https://patchblox.com/security/data/fix/linux/elsa-2024-4165.md) | Jun 27, 2024 |
| Linux | idm-pki-symkey RHEL 8 | 0:10.15.1-1.module+el8.10.0+21991+2e8cd757 | [RHSA-2024:4367](https://patchblox.com/security/data/fix/linux/rhsa-2024-4367.md) | Jul 8, 2024 |
| Linux | idm-pki-symkey almalinux 8 | 10.15.1-1.module_el8.10.0+3868+cdab0fd8 | [ALSA-2024:4367](https://patchblox.com/security/data/fix/linux/alsa-2024-4367.md) | Jul 8, 2024 |
| Linux | idm-pki-symkey ol 8 | 0:10.15.1-1.0.1.module+el8.10.0+90362+5113f0b5 | [ELSA-2024-4367](https://patchblox.com/security/data/fix/linux/elsa-2024-4367.md) | Jul 10, 2024 |
| Linux | idm-pki-tools RHEL 8 | 0:10.15.1-1.module+el8.10.0+21991+2e8cd757 | [RHSA-2024:4367](https://patchblox.com/security/data/fix/linux/rhsa-2024-4367.md) | Jul 8, 2024 |
| Linux | idm-pki-tools RHEL 9 | 0:11.5.0-2.el9_4 | [RHSA-2024:4165](https://patchblox.com/security/data/fix/linux/rhsa-2024-4165.md) | Jun 27, 2024 |
| Linux | idm-pki-tools almalinux 8 | 10.15.1-1.module_el8.10.0+3868+cdab0fd8 | [ALSA-2024:4367](https://patchblox.com/security/data/fix/linux/alsa-2024-4367.md) | Jul 8, 2024 |
| Linux | idm-pki-tools almalinux 9 | 11.5.0-2.el9_4.alma.1 | [ALSA-2024:4165](https://patchblox.com/security/data/fix/linux/alsa-2024-4165.md) | Jun 27, 2024 |
| Linux | idm-pki-tools ol 8 | 0:10.15.1-1.0.1.module+el8.10.0+90362+5113f0b5 | [ELSA-2024-4367](https://patchblox.com/security/data/fix/linux/elsa-2024-4367.md) | Jul 10, 2024 |
| Linux | idm-pki-tools ol 9 | 0:11.5.0-2.0.1.el9_4 | [ELSA-2024-4165](https://patchblox.com/security/data/fix/linux/elsa-2024-4165.md) | Jun 27, 2024 |
| Linux | idm-tomcatjss RHEL 8 | 0:7.8.0-1.module+el8.10.0+21280+cce842b8 | [RHSA-2024:4367](https://patchblox.com/security/data/fix/linux/rhsa-2024-4367.md) | Jul 8, 2024 |
| Linux | idm-tomcatjss almalinux 8 | 7.8.0-1.module_el8.10.0+3801+17b19a60 | [ALSA-2024:4367](https://patchblox.com/security/data/fix/linux/alsa-2024-4367.md) | Jul 8, 2024 |
| Linux | idm-tomcatjss ol 8 | 0:7.8.0-1.module+el8.10.0+90362+5113f0b5 | [ELSA-2024-4367](https://patchblox.com/security/data/fix/linux/elsa-2024-4367.md) | Jul 10, 2024 |
| Linux | jss rocky 8 | 0:4.11.0-1.module+el8.10.0+1816+f1a7c8eb | [RLSA-2024:4367](https://patchblox.com/security/data/fix/linux/rlsa-2024-4367.md) | May 7, 2025 |
| Linux | ldapjdk rocky 8 | 0:4.24.0-1.module+el8.10.0+1816+f1a7c8eb | [RLSA-2024:4367](https://patchblox.com/security/data/fix/linux/rlsa-2024-4367.md) | May 7, 2025 |
| Linux | pki-core rocky 8 | 0:10.15.1-1.module+el8.10.0+1836+57f0c18f | [RLSA-2024:4367](https://patchblox.com/security/data/fix/linux/rlsa-2024-4367.md) | May 7, 2025 |
| Linux | pki-core rocky 9 | 0:11.5.0-2.el9_4 | [RLSA-2024:4165](https://patchblox.com/security/data/fix/linux/rlsa-2024-4165.md) | Jul 3, 2024 |
| Linux | python3-idm-pki RHEL 8 | 0:10.15.1-1.module+el8.10.0+21991+2e8cd757 | [RHSA-2024:4367](https://patchblox.com/security/data/fix/linux/rhsa-2024-4367.md) | Jul 8, 2024 |
| Linux | python3-idm-pki RHEL 9 | 0:11.5.0-2.el9_4 | [RHSA-2024:4165](https://patchblox.com/security/data/fix/linux/rhsa-2024-4165.md) | Jun 27, 2024 |
| Linux | python3-idm-pki almalinux 8 | 10.15.1-1.module_el8.10.0+3868+cdab0fd8 | [ALSA-2024:4367](https://patchblox.com/security/data/fix/linux/alsa-2024-4367.md) | Jul 8, 2024 |
| Linux | python3-idm-pki almalinux 9 | 11.5.0-2.el9_4.alma.1 | [ALSA-2024:4165](https://patchblox.com/security/data/fix/linux/alsa-2024-4165.md) | Jun 27, 2024 |
| Linux | python3-idm-pki ol 8 | 0:10.15.1-1.0.1.module+el8.10.0+90362+5113f0b5 | [ELSA-2024-4367](https://patchblox.com/security/data/fix/linux/elsa-2024-4367.md) | Jul 10, 2024 |
| Linux | python3-idm-pki ol 9 | 0:11.5.0-2.0.1.el9_4 | [ELSA-2024-4165](https://patchblox.com/security/data/fix/linux/elsa-2024-4165.md) | Jun 27, 2024 |
| Linux | resteasy RHEL 8 | 0:3.0.26-7.module+el8.10.0+21132+79720f4e | [RHSA-2024:4367](https://patchblox.com/security/data/fix/linux/rhsa-2024-4367.md) | Jul 8, 2024 |
| Linux | resteasy almalinux 8 | 3.0.26-7.module_el8.10.0+3808+9d4ab1fb | [ALSA-2024:4367](https://patchblox.com/security/data/fix/linux/alsa-2024-4367.md) | Jul 8, 2024 |
| Linux | resteasy ol 8 | 0:3.0.26-7.module+el8.10.0+90362+5113f0b5 | [ELSA-2024-4367](https://patchblox.com/security/data/fix/linux/elsa-2024-4367.md) | Jul 10, 2024 |
| Linux | resteasy rocky 8 | 0:3.0.26-7.module+el8.10.0+1767+f923f786 | [RLSA-2024:4367](https://patchblox.com/security/data/fix/linux/rlsa-2024-4367.md) | May 7, 2025 |
| Linux | resteasy-javadoc RHEL 8 | 0:3.0.26-7.module+el8.10.0+21132+79720f4e | [RHSA-2024:4367](https://patchblox.com/security/data/fix/linux/rhsa-2024-4367.md) | Jul 8, 2024 |
| Linux | resteasy-javadoc almalinux 8 | 3.0.26-7.module_el8.10.0+3808+9d4ab1fb | [ALSA-2024:4367](https://patchblox.com/security/data/fix/linux/alsa-2024-4367.md) | Jul 8, 2024 |
| Linux | resteasy-javadoc ol 8 | 0:3.0.26-7.module+el8.10.0+90362+5113f0b5 | [ELSA-2024-4367](https://patchblox.com/security/data/fix/linux/elsa-2024-4367.md) | Jul 10, 2024 |
| Linux | tomcatjss rocky 8 | 0:7.8.0-1.module+el8.10.0+1816+f1a7c8eb | [RLSA-2024:4367](https://patchblox.com/security/data/fix/linux/rlsa-2024-4367.md) | May 7, 2025 |

---

Data as of 2026-11-08T06:59:42Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.
