Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

AlienVault OTX General

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit NetSec

Reddit Cybersecurity

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

A flaw was found in dogtag-pki and pki-core. The token authentication scheme can be bypassed with a LDAP injection. By passing the query string parameter sessionID=*, an attacker can authenticate with an existing session saved in the LDAP directory server, which may lead to escalation of privilege.

CVE-2023-4727 is a vulnerability identified in the dogtag-pki and pki-core components, which are widely used open-source public key infrastructure (PKI) solutions. The core issue stems from an authentication bypass caused by an LDAP injection vulnerability. Specifically, the token authentication mechanism relies on session identifiers stored in an LDAP directory server. An attacker can manipulate the sessionID query parameter by passing a wildcard character '*', which results in the LDAP query returning an existing valid session. This bypasses the normal authentication checks, allowing the attacker to impersonate a legitimate user without valid credentials. The consequence is a potential escalation of privileges, as the attacker gains unauthorized access to sensitive PKI functions or data. The vulnerability is remotely exploitable over the network without requiring user interaction or prior authentication, although the attack complexity is rated high due to the need to craft specific LDAP queries. The CVSS v3.1 score of 7.5 reflects high impact on confidentiality, integrity, and availability, as unauthorized access to PKI systems can compromise certificate issuance, revocation, and overall trust infrastructure. No public exploits are currently known, but the vulnerability is published and should be addressed promptly. The lack of available patches at the time of reporting necessitates interim mitigations such as input validation and monitoring. Given the critical role of PKI in securing communications and identity, this vulnerability poses a significant risk to organizations relying on dogtag-pki or pki-core.

Detailed information about CVE-2023-4727: Authentication Bypass by Primary Weakness. Get real-time updates, technical details, and mitigation strategies.

CVE-2023-4727: Authentication Bypass by Primary Weakness - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2023-4727: Authentication Bypass by Primary Weakness

Threats Tagged 'cve-2023-4727'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2023-4727'

Lead Pen Test Professional