A Cross-site request forgery vulnerability exists in ipa/session/login_password in all supported versions of IPA. This flaw allows an attacker to trick the user into submitting a request that could perform actions as the user, resulting in a loss of confidentiality and system integrity. During community penetration testing it was found that for certain HTTP end-points FreeIPA does not ensure CSRF protection. Due to implementation details one cannot use this flaw for reflection of a cookie representing already logged-in user. An attacker would always have to go through a new authentication attempt.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-ipatestsUpgrade ipa-healthcheckUpgrade ipa-client-sambaUpgrade python3-ipalibUpgrade python3-pyusbUpgrade bind-dyndb-ldapUpgrade python3-ipaserverUpgrade ipa-healthcheck-coreUpgrade python3-jwcryptoUpgrade ipa-server-commonUpgrade ipa-selinuxUpgrade ipa-client-commonUpgrade python3-ipaclientUpgrade custodiaUpgrade python3-qrcodeUpgrade ipa-server-dnsUpgrade ipa-clientUpgrade slapi-nisUpgrade ipa-commonUpgrade ipa-serverUpgrade ipa-client-epnUpgrade python3-kdcproxyUpgrade ipa-python-compatUpgrade python3-yubicoUpgrade python3-qrcode-coreUpgrade opendnssecUpgrade ipa-server-trust-adUpgrade softhsm-develUpgrade python3-custodiaUpgrade softhsm | Jan 15, 2024 | Jan 10, 2024 |
| Amazon Linux Ami 2 | — | Upgrade ipa-client-commonUpgrade ipa-server-trust-adUpgrade ipa-server-commonUpgrade ipa-commonUpgrade python2-ipaserverUpgrade python2-ipaclientUpgrade ipa-clientUpgrade python2-ipalibUpgrade ipa-serverUpgrade ipa-debuginfoUpgrade ipa-python-compatUpgrade ipa-server-dns | Feb 21, 2024 | Jan 10, 2024 |
| Centos_linux | — | Upgrade ipa-clientUpgrade ipa-python-compatUpgrade ipa-debuginfoUpgrade python2-ipalibUpgrade ipa-client-commonUpgrade ipa-server-dnsUpgrade ipa-serverUpgrade ipa-commonUpgrade python2-ipaserverUpgrade ipa-server-commonUpgrade python2-ipaclientUpgrade ipa-server-trust-ad | Jan 11, 2024 | Jan 10, 2024 |
| Debian | — | Upgrade freeipaNo solution exists | May 15, 2025 | Jan 10, 2024 |
| Oracle_linux | — | Upgrade python3-pyusbUpgrade ipa-server-commonUpgrade ipa-python-compatUpgrade python3-qrcode-coreUpgrade ipa-healthcheck-coreUpgrade python3-kdcproxyUpgrade ipa-server-dnsUpgrade python3-ipalibUpgrade opendnssecUpgrade softhsmUpgrade custodiaUpgrade slapi-nisUpgrade ipa-client-commonUpgrade ipa-server-trust-adUpgrade python3-custodiaUpgrade python3-qrcodeUpgrade python2-ipalibUpgrade python2-ipaclientUpgrade ipa-selinuxUpgrade python3-jwcryptoUpgrade bind-dyndb-ldapUpgrade python2-ipaserverUpgrade python3-yubicoUpgrade ipa-client-sambaUpgrade ipa-clientUpgrade softhsm-develUpgrade python3-ipaclientUpgrade ipa-healthcheckUpgrade ipa-commonUpgrade ipa-client-epnUpgrade python3-ipaserverUpgrade ipa-serverUpgrade python3-ipatests | Jan 11, 2024 | Jan 10, 2024 |
| Redhat_linux | — | Upgrade custodiaUpgrade ipa-healthcheckUpgrade ipa-server-debuginfoUpgrade ipa-server-trust-ad-debuginfoUpgrade python2-ipaserverUpgrade ipa-healthcheck-coreUpgrade ipa-server-trust-adUpgrade krb5-server-ldap-debuginfoUpgrade bind-dyndb-ldap-debugsourceUpgrade python3-ipatestsUpgrade krb5-workstation-debuginfoUpgrade softhsm-debuginfoUpgrade krb5-devel-debuginfoUpgrade krb5-pkinitUpgrade krb5-debuginfoNo solution existsUpgrade ipa-client-epnUpgrade slapi-nis-debuginfoUpgrade ipa-debugsourceUpgrade krb5-debugsourceUpgrade python3-qrcodeUpgrade ipa-selinuxUpgrade krb5-pkinit-debuginfoUpgrade python3-kdcproxyUpgrade softhsmUpgrade python3-custodiaUpgrade slapi-nis-debugsourceUpgrade bind-dyndb-ldap-debuginfoUpgrade python3-ipaclientUpgrade python3-yubicoUpgrade python3-pyusbUpgrade slapi-nisUpgrade ipa-client-debuginfoUpgrade softhsm-debugsourceUpgrade python2-ipaclientUpgrade opendnssec-debugsourceUpgrade ipa-client-commonUpgrade ipa-server-commonUpgrade krb5-libs-debuginfoUpgrade libkadm5Upgrade ipa-commonUpgrade opendnssec-debuginfoUpgrade ipa-clientUpgrade krb5-server-debuginfoUpgrade python3-ipalibUpgrade python3-jwcryptoUpgrade softhsm-develUpgrade ipa-python-compatUpgrade ipa-server-dnsUpgrade ipa-debuginfoUpgrade python3-qrcode-coreUpgrade krb5-libsUpgrade ipa-serverUpgrade bind-dyndb-ldapUpgrade krb5-workstationUpgrade krb5-server-ldapUpgrade libkadm5-debuginfoUpgrade krb5-develUpgrade python2-ipalibUpgrade opendnssecUpgrade krb5-serverUpgrade python3-ipaserverUpgrade ipa-client-samba | Jan 11, 2024 | Jan 10, 2024 |
| Rocky_linux | — | Upgrade slapi-nisUpgrade softhsmUpgrade slapi-nis-debugsourceUpgrade opendnssecUpgrade opendnssec-debuginfoUpgrade slapi-nis-debuginfoUpgrade softhsm-develUpgrade softhsm-debugsourceUpgrade softhsm-debuginfoUpgrade opendnssec-debugsource | Aug 15, 2024 | Jan 10, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub