A Cross-site request forgery vulnerability exists in ipa/session/login_password in all supported versions of IPA. This flaw allows an attacker to trick the user into submitting a request that could perform actions as the user, resulting in a loss of confidentiality and system integrity. During community penetration testing it was found that for certain HTTP end-points FreeIPA does not ensure CSRF protection. Due to implementation details one cannot use this flaw for reflection of a cookie representing already logged-in user. An attacker would always have to go through a new authentication attempt.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-jwcryptoUpgrade python3-ipalibUpgrade ipa-healthcheck-coreUpgrade python3-qrcodeUpgrade custodiaUpgrade ipa-client-commonUpgrade ipa-server-commonUpgrade python3-ipaserverUpgrade ipa-client-sambaUpgrade python3-ipatestsUpgrade ipa-selinuxUpgrade bind-dyndb-ldapUpgrade ipa-healthcheckUpgrade python3-ipaclientUpgrade python3-pyusbUpgrade ipa-clientUpgrade ipa-server-trust-adUpgrade python3-qrcode-coreUpgrade softhsmUpgrade python3-custodiaUpgrade ipa-server-dnsUpgrade ipa-python-compatUpgrade ipa-serverUpgrade python3-kdcproxyUpgrade python3-yubicoUpgrade softhsm-develUpgrade slapi-nisUpgrade ipa-client-epnUpgrade ipa-commonUpgrade opendnssec | Jan 15, 2024 | Jan 10, 2024 |
| Amazon Linux Ami 2 | — | Upgrade ipa-clientUpgrade ipa-server-dnsUpgrade ipa-serverUpgrade ipa-debuginfoUpgrade ipa-python-compatUpgrade python2-ipaclientUpgrade python2-ipalibUpgrade ipa-server-trust-adUpgrade ipa-server-commonUpgrade ipa-commonUpgrade python2-ipaserverUpgrade ipa-client-common | Feb 21, 2024 | Jan 10, 2024 |
| Centos_linux | — | Upgrade ipa-server-dnsUpgrade python2-ipalibUpgrade ipa-serverUpgrade ipa-client-commonUpgrade ipa-python-compatUpgrade ipa-debuginfoUpgrade ipa-clientUpgrade ipa-commonUpgrade python2-ipaclientUpgrade ipa-server-trust-adUpgrade ipa-server-commonUpgrade python2-ipaserver | Jan 11, 2024 | Jan 10, 2024 |
| Debian | — | No solution existsUpgrade freeipa | May 15, 2025 | Jan 10, 2024 |
| Oracle_linux | — | Upgrade ipa-healthcheckUpgrade softhsm-develUpgrade ipa-commonUpgrade ipa-client-epnUpgrade python3-ipaserverUpgrade python3-ipatestsUpgrade python3-yubicoUpgrade ipa-serverUpgrade ipa-client-sambaUpgrade python2-ipaserverUpgrade python3-jwcryptoUpgrade ipa-selinuxUpgrade python3-ipaclientUpgrade ipa-clientUpgrade bind-dyndb-ldapUpgrade ipa-server-trust-adUpgrade ipa-healthcheck-coreUpgrade custodiaUpgrade python3-qrcode-coreUpgrade ipa-server-dnsUpgrade ipa-client-commonUpgrade opendnssecUpgrade python2-ipalibUpgrade python2-ipaclientUpgrade slapi-nisUpgrade python3-kdcproxyUpgrade python3-ipalibUpgrade ipa-server-commonUpgrade ipa-python-compatUpgrade softhsmUpgrade python3-qrcodeUpgrade python3-pyusbUpgrade python3-custodia | Jan 11, 2024 | Jan 10, 2024 |
| Redhat_linux | — | Upgrade ipa-client-commonUpgrade softhsm-debugsourceUpgrade ipa-server-commonUpgrade slapi-nisUpgrade opendnssecUpgrade python2-ipaclientUpgrade krb5-serverUpgrade opendnssec-debugsourceUpgrade opendnssec-debuginfoUpgrade ipa-debuginfoUpgrade krb5-libs-debuginfoUpgrade python3-jwcryptoUpgrade krb5-server-ldapUpgrade softhsmUpgrade python3-ipaserverUpgrade python3-ipaclientUpgrade python3-custodiaUpgrade python2-ipalibUpgrade python3-qrcode-coreUpgrade python3-yubicoUpgrade softhsm-develUpgrade bind-dyndb-ldap-debuginfoUpgrade krb5-libsUpgrade krb5-server-debuginfoUpgrade ipa-serverUpgrade krb5-workstationUpgrade libkadm5Upgrade libkadm5-debuginfoUpgrade ipa-clientUpgrade bind-dyndb-ldapUpgrade python3-pyusbUpgrade ipa-commonUpgrade ipa-server-dnsUpgrade python3-ipalibUpgrade slapi-nis-debugsourceUpgrade krb5-develUpgrade ipa-client-sambaUpgrade ipa-python-compatUpgrade ipa-client-debuginfoUpgrade ipa-server-debuginfoUpgrade custodiaUpgrade ipa-client-epnUpgrade ipa-selinuxUpgrade python3-qrcodeUpgrade krb5-devel-debuginfoUpgrade softhsm-debuginfoUpgrade krb5-debuginfoUpgrade python3-kdcproxyUpgrade krb5-workstation-debuginfoUpgrade slapi-nis-debuginfoUpgrade ipa-healthcheck-coreUpgrade ipa-server-trust-adUpgrade krb5-pkinit-debuginfoUpgrade python3-ipatestsNo solution existsUpgrade python2-ipaserverUpgrade ipa-debugsourceUpgrade krb5-pkinitUpgrade ipa-healthcheckUpgrade bind-dyndb-ldap-debugsourceUpgrade krb5-server-ldap-debuginfoUpgrade ipa-server-trust-ad-debuginfoUpgrade krb5-debugsource | Jan 11, 2024 | Jan 10, 2024 |
| Rocky_linux | — | Upgrade opendnssec-debugsourceUpgrade softhsm-debuginfoUpgrade softhsm-debugsourceUpgrade softhsm-develUpgrade opendnssec-debuginfoUpgrade opendnssecUpgrade slapi-nis-debuginfoUpgrade slapi-nisUpgrade slapi-nis-debugsourceUpgrade softhsm | Aug 15, 2024 | Jan 10, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub