A Cross-site request forgery vulnerability exists in ipa/session/login_password in all supported versions of IPA. This flaw allows an attacker to trick the user into submitting a request that could perform actions as the user, resulting in a loss of confidentiality and system integrity. During community penetration testing it was found that for certain HTTP end-points FreeIPA does not ensure CSRF protection. Due to implementation details one cannot use this flaw for reflection of a cookie representing already logged-in user. An attacker would always have to go through a new authentication attempt.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-ipatestsUpgrade bind-dyndb-ldapUpgrade ipa-healthcheckUpgrade ipa-client-commonUpgrade ipa-selinuxUpgrade python3-ipalibUpgrade ipa-server-commonUpgrade python3-qrcodeUpgrade ipa-client-sambaUpgrade python3-ipaserverUpgrade python3-jwcryptoUpgrade python3-ipaclientUpgrade custodiaUpgrade python3-pyusbUpgrade ipa-healthcheck-coreUpgrade python3-yubicoUpgrade python3-kdcproxyUpgrade ipa-server-dnsUpgrade ipa-server-trust-adUpgrade ipa-client-epnUpgrade softhsm-develUpgrade slapi-nisUpgrade ipa-commonUpgrade ipa-serverUpgrade softhsmUpgrade opendnssecUpgrade python3-custodiaUpgrade ipa-python-compatUpgrade ipa-clientUpgrade python3-qrcode-core | Jan 15, 2024 | Jan 10, 2024 |
| Amazon Linux Ami 2 | — | Upgrade ipa-serverUpgrade ipa-debuginfoUpgrade ipa-python-compatUpgrade python2-ipaclientUpgrade python2-ipalibUpgrade ipa-server-dnsUpgrade ipa-clientUpgrade python2-ipaserverUpgrade ipa-server-commonUpgrade ipa-client-commonUpgrade ipa-server-trust-adUpgrade ipa-common | Feb 21, 2024 | Jan 10, 2024 |
| Centos_linux | — | Upgrade ipa-server-trust-adUpgrade python2-ipaclientUpgrade python2-ipaserverUpgrade ipa-server-commonUpgrade ipa-commonUpgrade ipa-python-compatUpgrade ipa-server-dnsUpgrade ipa-serverUpgrade ipa-clientUpgrade ipa-client-commonUpgrade python2-ipalibUpgrade ipa-debuginfo | Jan 11, 2024 | Jan 10, 2024 |
| Debian | — | Upgrade freeipaNo solution exists | May 15, 2025 | Jan 10, 2024 |
| Oracle_linux | — | Upgrade python3-ipaserverUpgrade python3-jwcryptoUpgrade ipa-clientUpgrade python3-ipatestsUpgrade python3-ipaclientUpgrade python3-yubicoUpgrade bind-dyndb-ldapUpgrade ipa-client-sambaUpgrade python2-ipaserverUpgrade ipa-client-epnUpgrade ipa-serverUpgrade ipa-selinuxUpgrade softhsm-develUpgrade ipa-healthcheckUpgrade ipa-commonUpgrade ipa-server-commonUpgrade python3-qrcode-coreUpgrade ipa-healthcheck-coreUpgrade softhsmUpgrade ipa-server-dnsUpgrade python2-ipaclientUpgrade python2-ipalibUpgrade custodiaUpgrade python3-kdcproxyUpgrade ipa-server-trust-adUpgrade python3-ipalibUpgrade ipa-client-commonUpgrade ipa-python-compatUpgrade python3-pyusbUpgrade python3-custodiaUpgrade opendnssecUpgrade slapi-nisUpgrade python3-qrcode | Jan 11, 2024 | Jan 10, 2024 |
| Redhat_linux | — | Upgrade ipa-healthcheck-coreUpgrade krb5-workstation-debuginfoUpgrade python3-ipatestsUpgrade krb5-pkinit-debuginfoUpgrade ipa-client-epnUpgrade krb5-debugsourceUpgrade python3-qrcodeUpgrade ipa-selinuxUpgrade ipa-server-trust-ad-debuginfoUpgrade bind-dyndb-ldap-debugsourceUpgrade krb5-devel-debuginfoUpgrade custodiaUpgrade ipa-server-debuginfoUpgrade ipa-healthcheckUpgrade python3-kdcproxyUpgrade krb5-debuginfoUpgrade krb5-server-ldap-debuginfoUpgrade python2-ipaserverUpgrade krb5-pkinitUpgrade slapi-nis-debuginfoUpgrade softhsm-debuginfoUpgrade ipa-debugsourceNo solution existsUpgrade ipa-server-trust-adUpgrade slapi-nisUpgrade bind-dyndb-ldap-debuginfoUpgrade python3-pyusbUpgrade ipa-client-commonUpgrade python3-custodiaUpgrade ipa-python-compatUpgrade slapi-nis-debugsourceUpgrade softhsm-develUpgrade python3-jwcryptoUpgrade python3-yubicoUpgrade python3-ipaclientUpgrade libkadm5-debuginfoUpgrade krb5-develUpgrade ipa-server-commonUpgrade ipa-client-sambaUpgrade ipa-client-debuginfoUpgrade krb5-server-ldapUpgrade python3-ipaserverUpgrade opendnssecUpgrade python2-ipalibUpgrade krb5-serverUpgrade ipa-debuginfoUpgrade libkadm5Upgrade ipa-commonUpgrade opendnssec-debuginfoUpgrade krb5-libs-debuginfoUpgrade ipa-server-dnsUpgrade python3-ipalibUpgrade python3-qrcode-coreUpgrade bind-dyndb-ldapUpgrade krb5-libsUpgrade krb5-server-debuginfoUpgrade ipa-clientUpgrade ipa-serverUpgrade krb5-workstationUpgrade softhsm-debugsourceUpgrade opendnssec-debugsourceUpgrade python2-ipaclientUpgrade softhsm | Jan 11, 2024 | Jan 10, 2024 |
| Rocky_linux | — | Upgrade opendnssec-debugsourceUpgrade softhsm-debugsourceUpgrade softhsm-debuginfoUpgrade softhsm-develUpgrade slapi-nis-debugsourceUpgrade opendnssec-debuginfoUpgrade slapi-nis-debuginfoUpgrade softhsmUpgrade opendnssecUpgrade slapi-nis | Aug 15, 2024 | Jan 10, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub