Log in Start free

Vulnerability · Published Jan 10, 2024 · Assigned by redhat

CVE-2023-5455Ipa: invalid csrf protection

Medium 6.5

In plain English

A medium-severity cross-site request forgery in Red Hat Enterprise Linux 6 from Red Hat. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 48% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)6.5Medium
Exploit odds (30 days)0.6%top 52.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

A Cross-site request forgery vulnerability exists in ipa/session/login_password in all supported versions of IPA. This flaw allows an attacker to trick the user into submitting a request that could perform actions as the user, resulting in a loss of confidentiality and system integrity. During community penetration testing it was found that for certain HTTP end-points FreeIPA does not ensure CSRF protection. Due to implementation details one cannot use this flaw for reflection of a cookie representing already logged-in user. An attacker would always have to go through a new authentication attempt.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:8bind-dyndb-ldap11.6-4.module_el8.6.0+3339+9b5fdd22ALSA-2024:0143
AlmaLinux:8custodia0.6.0-3.module_el8.6.0+2881+2f24dc92ALSA-2024:0143
AlmaLinux:8ipa-client4.9.12-11.module_el8.9.0+3715+e4197dc9.alma.1ALSA-2024:0143
AlmaLinux:9ipa-client4.10.2-5.el9_3.alma.1ALSA-2024:0141
AlmaLinux:8ipa-client-common4.9.12-11.module_el8.9.0+3715+e4197dc9.alma.1ALSA-2024:0143
AlmaLinux:9ipa-client-common4.10.2-5.el9_3.alma.1ALSA-2024:0141
AlmaLinux:8ipa-client-epn4.9.12-11.module_el8.9.0+3715+e4197dc9.alma.1ALSA-2024:0143
AlmaLinux:9ipa-client-epn4.10.2-5.el9_3.alma.1ALSA-2024:0141
AlmaLinux:8ipa-client-samba4.9.12-11.module_el8.9.0+3715+e4197dc9.alma.1ALSA-2024:0143
AlmaLinux:9ipa-client-samba4.10.2-5.el9_3.alma.1ALSA-2024:0141
AlmaLinux:8ipa-common4.9.12-11.module_el8.9.0+3715+e4197dc9.alma.1ALSA-2024:0143
AlmaLinux:9ipa-common4.10.2-5.el9_3.alma.1ALSA-2024:0141
AlmaLinux:8ipa-healthcheck0.12-3.module_el8.9.0+3651+d05ea4c5ALSA-2024:0143
AlmaLinux:8ipa-healthcheck-core0.12-3.module_el8.9.0+3651+d05ea4c5ALSA-2024:0143
AlmaLinux:8ipa-python-compat4.9.12-11.module_el8.9.0+3715+e4197dc9.alma.1ALSA-2024:0143
AlmaLinux:8ipa-selinux4.9.12-11.module_el8.9.0+3715+e4197dc9.alma.1ALSA-2024:0143
AlmaLinux:9ipa-selinux4.10.2-5.el9_3.alma.1ALSA-2024:0141
AlmaLinux:8ipa-server4.9.12-11.module_el8.9.0+3715+e4197dc9.alma.1ALSA-2024:0143
AlmaLinux:9ipa-server4.10.2-5.el9_3.alma.1ALSA-2024:0141
AlmaLinux:8ipa-server-common4.9.12-11.module_el8.9.0+3715+e4197dc9.alma.1ALSA-2024:0143
AlmaLinux:9ipa-server-common4.10.2-5.el9_3.alma.1ALSA-2024:0141
AlmaLinux:8ipa-server-dns4.9.12-11.module_el8.9.0+3715+e4197dc9.alma.1ALSA-2024:0143
AlmaLinux:9ipa-server-dns4.10.2-5.el9_3.alma.1ALSA-2024:0141
AlmaLinux:8ipa-server-trust-ad4.9.12-11.module_el8.9.0+3715+e4197dc9.alma.1ALSA-2024:0143
AlmaLinux:9ipa-server-trust-ad4.10.2-5.el9_3.alma.1ALSA-2024:0141
AlmaLinux:8opendnssec2.1.7-1.module_el8.6.0+2881+2f24dc92ALSA-2024:0143
AlmaLinux:8opendnssec2.1.7-1.module_el8.6.0+3031+2f24dc92ALSA-2024:0143
AlmaLinux:8python3-custodia0.6.0-3.module_el8.6.0+2881+2f24dc92ALSA-2024:0143
AlmaLinux:8python3-ipaclient4.9.12-11.module_el8.9.0+3715+e4197dc9.alma.1ALSA-2024:0143
AlmaLinux:9python3-ipaclient4.10.2-5.el9_3.alma.1ALSA-2024:0141
AlmaLinux:8python3-ipalib4.9.12-11.module_el8.9.0+3715+e4197dc9.alma.1ALSA-2024:0143
AlmaLinux:9python3-ipalib4.10.2-5.el9_3.alma.1ALSA-2024:0141
AlmaLinux:8python3-ipaserver4.9.12-11.module_el8.9.0+3715+e4197dc9.alma.1ALSA-2024:0143
AlmaLinux:9python3-ipaserver4.10.2-5.el9_3.alma.1ALSA-2024:0141
AlmaLinux:8python3-ipatests4.9.12-11.module_el8.9.0+3715+e4197dc9.alma.1ALSA-2024:0143
AlmaLinux:9python3-ipatests4.10.2-5.el9_3.alma.1ALSA-2024:0141
AlmaLinux:8python3-jwcrypto0.5.0-1.1.module_el8.7.0+3349+cfeff52eALSA-2024:0143
AlmaLinux:8python3-kdcproxy0.4-5.module_el8.9.0+3682+f63caf3eALSA-2024:0143
AlmaLinux:8python3-pyusb1.0.0-9.1.module_el8.7.0+3349+cfeff52eALSA-2024:0143
AlmaLinux:8python3-qrcode5.1-12.module_el8.6.0+2881+2f24dc92ALSA-2024:0143
AlmaLinux:8python3-qrcode-core5.1-12.module_el8.6.0+2881+2f24dc92ALSA-2024:0143
AlmaLinux:8python3-yubico1.3.2-9.1.module_el8.7.0+3349+cfeff52eALSA-2024:0143
AlmaLinux:8slapi-nis0.60.0-4.module_el8.9.0+3682+f63caf3e.alma.1ALSA-2024:0143
AlmaLinux:8softhsm2.6.0-5.module_el8.6.0+2881+2f24dc92ALSA-2024:0143
AlmaLinux:8softhsm2.6.0-5.module_el8.6.0+3031+2f24dc92ALSA-2024:0143
AlmaLinux:8softhsm-devel2.6.0-5.module_el8.6.0+2881+2f24dc92ALSA-2024:0143
AlmaLinux:8softhsm-devel2.6.0-5.module_el8.6.0+3031+2f24dc92ALSA-2024:0143
Debian:12freeipano fix listedDEBIAN-CVE-2023-5455
Debian:13freeipa4.11.1-1DEBIAN-CVE-2023-5455
Rocky Linux:8custodia0:0.6.0-3.module+el8.9.0+1371+ffa84eb9RLSA-2024:0143
Rocky Linux:8ipa-healthcheck0:0.12-3.module+el8.9.0+1433+5bd2f890RLSA-2024:0143
Rocky Linux:8ipa-healthcheck0:0.12-3.module+el8.9.0+1434+912e18bdRLSA-2024:0143
Rocky Linux:8opendnssec0:2.1.7-1.module+el8.9.0+1371+ffa84eb9RLSA-2024:0143
Rocky Linux:8python-kdcproxy0:0.4-5.module+el8.9.0+1371+ffa84eb9RLSA-2024:0143
Rocky Linux:8python-kdcproxy0:0.4-5.module+el8.10.0+1915+3c70f7d9.1RLSA-2024:0143
Rocky Linux:8python-qrcode0:5.1-12.module+el8.9.0+1372+09f67869RLSA-2024:0143
Rocky Linux:8python-qrcode0:5.1-12.module+el8.9.0+1371+ffa84eb9RLSA-2024:0143
Rocky Linux:8python-yubico0:1.3.2-9.1.module+el8.9.0+1372+09f67869RLSA-2024:0143
Rocky Linux:8python-yubico0:1.3.2-9.1.module+el8.9.0+1371+ffa84eb9RLSA-2024:0143
Rocky Linux:8pyusb0:1.0.0-9.1.module+el8.9.0+1372+09f67869RLSA-2024:0143
Rocky Linux:8pyusb0:1.0.0-9.1.module+el8.9.0+1371+ffa84eb9RLSA-2024:0143
Rocky Linux:8slapi-nis0:0.60.0-4.module+el8.9.0+1573+39ab85f4RLSA-2024:0143
Rocky Linux:8softhsm0:2.6.0-5.module+el8.9.0+1371+ffa84eb9RLSA-2024:0143
Ubuntu:22.04:LTSfreeipano fix listedUBUNTU-CVE-2023-5455
Ubuntu:24.04:LTSfreeipano fix listedUBUNTU-CVE-2023-5455
Ubuntu:25.10freeipano fix listedUBUNTU-CVE-2023-5455
Ubuntu:26.04:LTSfreeipano fix listedUBUNTU-CVE-2023-5455
Ubuntu:26.10freeipano fix listedUBUNTU-CVE-2023-5455

Affected products (as reported)

VendorProductVersions
Red Hat Red Hat Enterprise Linux 7 see references
Red Hat Red Hat Enterprise Linux 8 see references
Red Hat Red Hat Enterprise Linux 8.2 Advanced Update Support see references
Red Hat Red Hat Enterprise Linux 8.2 Telecommunications Update Service see references
Red Hat Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions see references
Red Hat Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support see references
Red Hat Red Hat Enterprise Linux 8.4 Telecommunications Update Service see references
Red Hat Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions see references
Red Hat Red Hat Enterprise Linux 8.6 Extended Update Support see references
Red Hat Red Hat Enterprise Linux 8.8 Extended Update Support see references
Red Hat Red Hat Enterprise Linux 9 see references
Red Hat Red Hat Enterprise Linux 9.0 Extended Update Support see references
Red Hat Red Hat Enterprise Linux 9.2 Extended Update Support see references
Red Hat Red Hat Enterprise Linux 6 see references
Red Hat Red Hat Enterprise Linux 8 see references
Red Hat Red Hat Enterprise Linux 8 see references

Weakness: CWE-352 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

References