A Cross-site request forgery vulnerability exists in ipa/session/login_password in all supported versions of IPA. This flaw allows an attacker to trick the user into submitting a request that could perform actions as the user, resulting in a loss of confidentiality and system integrity. During community penetration testing it was found that for certain HTTP end-points FreeIPA does not ensure CSRF protection. Due to implementation details one cannot use this flaw for reflection of a cookie representing already logged-in user. An attacker would always have to go through a new authentication attempt.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade custodiaUpgrade ipa-client-commonUpgrade python3-ipaclientUpgrade ipa-healthcheckUpgrade ipa-client-sambaUpgrade python3-jwcryptoUpgrade python3-qrcodeUpgrade ipa-server-commonUpgrade python3-pyusbUpgrade python3-ipaserverUpgrade python3-ipatestsUpgrade ipa-healthcheck-coreUpgrade ipa-selinuxUpgrade bind-dyndb-ldapUpgrade python3-ipalibUpgrade ipa-server-trust-adUpgrade python3-custodiaUpgrade ipa-commonUpgrade ipa-clientUpgrade python3-qrcode-coreUpgrade ipa-server-dnsUpgrade ipa-python-compatUpgrade opendnssecUpgrade slapi-nisUpgrade ipa-client-epnUpgrade python3-yubicoUpgrade softhsmUpgrade python3-kdcproxyUpgrade ipa-serverUpgrade softhsm-devel | Jan 15, 2024 | Jan 10, 2024 |
| Amazon Linux Ami 2 | — | Upgrade python2-ipaclientUpgrade ipa-python-compatUpgrade ipa-serverUpgrade ipa-clientUpgrade ipa-debuginfoUpgrade python2-ipalibUpgrade ipa-server-dnsUpgrade python2-ipaserverUpgrade ipa-commonUpgrade ipa-client-commonUpgrade ipa-server-trust-adUpgrade ipa-server-common | Feb 21, 2024 | Jan 10, 2024 |
| Centos_linux | — | Upgrade python2-ipaserverUpgrade ipa-commonUpgrade python2-ipaclientUpgrade ipa-server-trust-adUpgrade ipa-server-commonUpgrade ipa-serverUpgrade ipa-python-compatUpgrade ipa-clientUpgrade ipa-debuginfoUpgrade ipa-client-commonUpgrade ipa-server-dnsUpgrade python2-ipalib | Jan 11, 2024 | Jan 10, 2024 |
| Debian | — | Upgrade freeipa | May 15, 2025 | Jan 10, 2024 |
| Oracle_linux | — | Upgrade bind-dyndb-ldapUpgrade ipa-clientUpgrade python3-yubicoUpgrade ipa-client-sambaUpgrade python3-ipatestsUpgrade python3-ipaserverUpgrade ipa-serverUpgrade python2-ipaserverUpgrade python3-jwcryptoUpgrade python3-ipaclientUpgrade softhsm-develUpgrade ipa-client-epnUpgrade ipa-selinuxUpgrade ipa-healthcheckUpgrade ipa-commonUpgrade python3-pyusbUpgrade python3-ipalibUpgrade python3-custodiaUpgrade custodiaUpgrade softhsmUpgrade python3-kdcproxyUpgrade ipa-server-trust-adUpgrade ipa-client-commonUpgrade python2-ipalibUpgrade python2-ipaclientUpgrade slapi-nisUpgrade ipa-server-dnsUpgrade ipa-server-commonUpgrade ipa-python-compatUpgrade python3-qrcodeUpgrade opendnssecUpgrade ipa-healthcheck-coreUpgrade python3-qrcode-core | Jan 11, 2024 | Jan 10, 2024 |
| Redhat_linux | — | Upgrade ipa-healthcheckNo solution existsUpgrade ipa-debugsourceUpgrade python2-ipaserverUpgrade krb5-pkinit-debuginfoUpgrade python3-ipatestsUpgrade krb5-debuginfoUpgrade custodiaUpgrade ipa-client-epnUpgrade ipa-server-debuginfoUpgrade ipa-server-trust-adUpgrade krb5-server-ldap-debuginfoUpgrade bind-dyndb-ldap-debugsourceUpgrade ipa-server-trust-ad-debuginfoUpgrade krb5-debugsourceUpgrade softhsm-debuginfoUpgrade ipa-selinuxUpgrade python3-qrcodeUpgrade krb5-devel-debuginfoUpgrade krb5-pkinitUpgrade slapi-nis-debuginfoUpgrade krb5-workstation-debuginfoUpgrade python3-kdcproxyUpgrade ipa-healthcheck-coreUpgrade opendnssec-debuginfoUpgrade krb5-libs-debuginfoUpgrade ipa-client-debuginfoUpgrade ipa-server-commonUpgrade krb5-develUpgrade ipa-client-commonUpgrade ipa-server-dnsUpgrade python2-ipalibUpgrade python3-ipaserverUpgrade opendnssecUpgrade ipa-debuginfoUpgrade bind-dyndb-ldap-debuginfoUpgrade python3-custodiaUpgrade python3-ipaclientUpgrade krb5-server-ldapUpgrade ipa-client-sambaUpgrade slapi-nisUpgrade softhsm-debugsourceUpgrade libkadm5-debuginfoUpgrade python3-ipalibUpgrade krb5-workstationUpgrade krb5-libsUpgrade krb5-server-debuginfoUpgrade bind-dyndb-ldapUpgrade ipa-serverUpgrade ipa-clientUpgrade python3-qrcode-coreUpgrade softhsm-develUpgrade python3-yubicoUpgrade softhsmUpgrade python2-ipaclientUpgrade python3-pyusbUpgrade opendnssec-debugsourceUpgrade slapi-nis-debugsourceUpgrade python3-jwcryptoUpgrade ipa-python-compatUpgrade krb5-serverUpgrade ipa-commonUpgrade libkadm5 | Jan 11, 2024 | Jan 10, 2024 |
| Rocky_linux | — | Upgrade softhsmUpgrade slapi-nis-debugsourceUpgrade slapi-nisUpgrade opendnssec-debuginfoUpgrade softhsm-develUpgrade slapi-nis-debuginfoUpgrade opendnssecUpgrade softhsm-debuginfoUpgrade softhsm-debugsourceUpgrade opendnssec-debugsource | Aug 15, 2024 | Jan 10, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub