CVE-2023-4727: 
Keycloak vulnerability analysis and mitigation

CVE-2023-4727 is a security vulnerability discovered in dogtag-pki and pki-core affecting their token authentication scheme. The vulnerability was disclosed and patches began being released in June 2024. The flaw affects multiple versions of Red Hat Enterprise Linux and Red Hat Certificate System (Red Hat CVE).

The vulnerability allows bypassing the token authentication scheme through LDAP injection. An attacker can authenticate with an existing session saved in the LDAP directory server by passing the query string parameter sessionID=*. The vulnerability has been assigned a CVSS v3.1 base score of 7.5 (High) with the vector string CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H. The vulnerability is classified as CWE-305 (Authentication Bypass by Primary Weakness) (Red Hat CVE).

If exploited, this vulnerability could lead to escalation of privilege by allowing an attacker to authenticate with existing sessions in the LDAP directory server. The high CVSS score indicates potential severe impacts on confidentiality, integrity, and availability of the affected systems (Red Hat CVE).

The vulnerability requires an adjacent network attack vector and high attack complexity, but no privileges or user interaction. The attack can be performed by manipulating the sessionID parameter to exploit the LDAP injection vulnerability (Red Hat CVE).

Red Hat has released security updates to address this vulnerability across multiple product versions. Fixes have been implemented in the upstream repository through commits to the master branch and v11.5 branch. Users are advised to apply the security updates provided through various RHSA advisories (Red Hat CVE, Bugzilla).