Cross-site request forgery in FreeIPA - CVE-2023-5455

Vulnerability identifier: #VU85268

CSH Severity: Medium

CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-5455

CWE-ID: CWE-352

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform cross-site request forgery attacks.

The vulnerability exists due to insufficient validation of the HTTP request origin. A remote attacker can trick the victim to visit a specially crafted web page and perform arbitrary actions on behalf of the victim on the vulnerable website.

FreeIPA
webMethods Managed File Transfer
Service Telemetry Framework
Anolis OS
CentOS
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for Power, big endian
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Fedora
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
python3-kdcproxy
python3-jwcrypto
python3-custodia
custodia
ipa-healthcheck-core
ipa-healthcheck
slapi-nis
python3-pyusb
python3-yubico
krb5 (Red Hat package)
opendnssec
softhsm-devel
softhsm
ipa (Red Hat package)
python2-ipaclient
ipa-server-common
ipa-server-dns
ipa-client
ipa-server
ipa-server-trust-ad
ipa-client-common
ipa-common
ipa-python-compat
python2-ipaserver
python2-ipalib
ipa-selinux
ipa-client-epn
ipa-client-samba
python3-ipatests
python3-ipaserver
python3-ipalib
python3-ipaclient
freeipa
python3-qrcode-core
python3-qrcode
bind-dyndb-ldap
IBM Application Gateway

Install updates from vendor's website.

FreeIPA - addressed in versions 4.6.10, 4.9.14, 4.10.3, 4.11.1
Service Telemetry Framework - update to 1.5.4
IBM Application Gateway - update to 24.12.0
python3-kdcproxy - update to 0.4-5
python3-jwcrypto - update to 0.5.0-1.1
python3-custodia - update to 0.6.0-3
custodia - update to 0.6.0-3
ipa-healthcheck-core - update to 0.12-3
ipa-healthcheck - update to 0.12-3
slapi-nis - update to 0.60.0-4.0.1
python3-pyusb - update to 1.0.0-9.1
python3-yubico - update to 1.3.2-9.1
krb5 (Red Hat package) - update to 1.18.2-16.el8_6
opendnssec - update to 2.1.7-1
softhsm-devel - update to 2.6.0-5
softhsm - update to 2.6.0-5
ipa (Red Hat package) - addressed in versions 4.6.8-5.el7_9.16, 4.9.8-9.el9_0, 4.10.1-10.el9_2, 4.10.2-5.el9_3
python2-ipaclient - update to 4.6.8-5.0.1
ipa-server-common - addressed in versions 4.6.8-5.0.1, 4.9.12-11.0.1
ipa-server-dns - addressed in versions 4.6.8-5.0.1, 4.9.12-11.0.1
ipa-client - addressed in versions 4.6.8-5.0.1, 4.9.12-11.0.1
ipa-server - addressed in versions 4.6.8-5.0.1, 4.9.12-11.0.1
ipa-server-trust-ad - addressed in versions 4.6.8-5.0.1, 4.9.12-11.0.1
ipa-client-common - addressed in versions 4.6.8-5.0.1, 4.9.12-11.0.1
ipa-common - addressed in versions 4.6.8-5.0.1, 4.9.12-11.0.1
ipa-python-compat - addressed in versions 4.6.8-5.0.1, 4.9.12-11.0.1
python2-ipaserver - update to 4.6.8-5.0.1
python2-ipalib - update to 4.6.8-5.0.1
ipa-selinux - update to 4.9.12-11.0.1
ipa-client-epn - update to 4.9.12-11.0.1
ipa-client-samba - update to 4.9.12-11.0.1
python3-ipatests - update to 4.9.12-11.0.1
python3-ipaserver - update to 4.9.12-11.0.1
python3-ipalib - update to 4.9.12-11.0.1
python3-ipaclient - update to 4.9.12-11.0.1
freeipa - addressed in versions 4.10.3-1.fc38, 4.11.1-1.fc39, 4.11.1-1.fc40
python3-qrcode-core - update to 5.1-12
python3-qrcode - update to 5.1-12
bind-dyndb-ldap - update to 11.6-4

• https://www.freeipa.org/release-notes/4-11-1.html
• https://www.freeipa.org/release-notes/4-10-3.html
• https://www.freeipa.org/release-notes/4-9-14.html
• https://www.freeipa.org/release-notes/4-6-10.html
• https://bugzilla.redhat.com/show_bug.cgi?id=2242828

• Cross-site request forgery in FreeIPA
• Fedora 40 update for freeipa
• Fedora 39 update for freeipa
• Fedora 38 update for freeipa
• Red Hat Enterprise Linux 9 update for ipa
• Red Hat Enterprise Linux 8 update for the idm:DL1 module
• Red Hat Enterprise Linux 8 update for the idm:DL1 module
• Red Hat Enterprise Linux 9.2 Extended Update Support update for ipa
• Red Hat Enterprise Linux 9.0 Extended Update Support update for ipa
• Red Hat Enterprise Linux 8.6 Extended Update Support update for the idm:DL1 module
• Red Hat Enterprise Linux 8 update for the idm:DL1 module
• Red Hat Enterprise Linux 8.8 Extended Update Support update for the idm:DL1 module
• Red Hat Enterprise Linux 7 update for ipa
• Red Hat Enterprise Linux 8.6 Extended Update Support update for krb5
• CentOS 7 update for ipa
• Multiple vulnerabilities in Service Telemetry Framework 1.5
• Anolis OS update for idm:DL1 module
• Anolis OS update for ipa
• Multiple vulnerabilities in IBM webMethods Managed File Transfer
• Multiple vulnerabilities in IBM Application Gateway