NetSight
IP …
medium6.5

CVE-2023-5455

A Cross-site request forgery vulnerability exists in ipa/session/login_password in all supported versions of IPA.

Impact

A Cross-site request forgery vulnerability exists in ipa/session/login_password in all supported versions of IPA. This flaw allows an attacker to trick the user into submitting a request that could perform actions as the user, resulting in a loss of confidentiality and system integrity. During community penetration testing it was found that for certain HTTP end-points FreeIPA does not ensure CSRF protection. Due to implementation details one cannot use this flaw for reflection of a cookie representing already logged-in user. An attacker would always have to go through a new authentication attempt.

Affected products

VendorProductAffected versions
FreeipaFreeipa
before 4.6.10
from 4.7.0 before 4.9.14
from 4.10.0 before 4.10.3
Version 4.11.0
FedoraprojectFedora
Versions 38, 39, 40
RedhatCodeready Linux Builder
All versions
RedhatEnterprise Linux
Versions 7.0, 8.0, 8.4, 9.0
RedhatEnterprise Linux Desktop
Version 7.0
RedhatEnterprise Linux Eus
Versions 8.6, 8.8, 9.0, 9.2
RedhatEnterprise Linux For Arm 64 Eus
Versions 8.8, 9.0, 9.2
RedhatEnterprise Linux For Ibm Z Systems
Versions 7.0, 8.0, 9.0
RedhatEnterprise Linux For Ibm Z Systems Eus
Versions 8.6, 8.8, 9.0, 9.2
RedhatEnterprise Linux For Power Big Endian
Version 7.0
RedhatEnterprise Linux For Power Little Endian
Versions 7.0, 8.0, 9.0
RedhatEnterprise Linux For Power Little Endian Eus
Versions 8.6, 8.8, 9.0, 9.2

Weakness classification

CWE-352

References