CVE-2023-33201
bouncycastle: potential blind LDAP injection attack using a self-signed certificate
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
Bouncy Castle For Java before 1.74 is affected by an LDAP injection vulnerability. The vulnerability only affects applications that use an LDAP CertStore from Bouncy Castle to validate X.509 certificates. During the certificate validation process, Bouncy Castle inserts the certificate's Subject Name into an LDAP search filter without any escaping, which leads to an LDAP injection vulnerability.
A flaw was found in Bouncy Castle 1.73. This issue targets the fix of LDAP wild cards. Before the fix there was no validation for the X.500 name of any certificate, subject, or issuer, so the presence of a wild card may lead to information disclosure. This could allow a malicious user to obtain unauthorized information via blind LDAP Injection, exploring the environment and enumerating data. The exploit depends on the structure of the target LDAP directory as well as what kind of errors are exposed to the user.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2023-05-18 CVE Reserved
- 2023-07-05 CVE Published
- 2024-08-02 CVE Updated
- 2024-10-09 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
- CWE-295: Improper Certificate Validation
CAPEC
References (7)
| URL | Tag | Source |
|---|---|---|
| https://bouncycastle.org | Product | |
| https://lists.debian.org/debian-lts-announce/2023/08/msg00000.html | Mailing List |
|
| https://security.netapp.com/advisory/ntap-20230824-0008 |
|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://github.com/bcgit/bc-java/commit/e8c409a8389c815ea3fda5e8b94c92fdfe583bcc | 2023-08-24 |
| URL | Date | SRC |
|---|---|---|
| https://github.com/bcgit/bc-java/wiki/CVE-2023-33201 | 2023-08-24 | |
| https://access.redhat.com/security/cve/CVE-2023-33201 | 2024-05-30 | |
| https://bugzilla.redhat.com/show_bug.cgi?id=2215465 | 2024-05-30 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Bouncycastle Search vendor "Bouncycastle" | Bc-java Search vendor "Bouncycastle" for product "Bc-java" | < 1.74 Search vendor "Bouncycastle" for product "Bc-java" and version " < 1.74" | - |
Affected
| ||||||