Vulnerability Description
A Cross-site request forgery vulnerability exists in ipa/session/login_password in all supported versions of IPA. This flaw allows an attacker to trick the user into submitting a request that could perform actions as the user, resulting in a loss of confidentiality and system integrity. During community penetration testing it was found that for certain HTTP end-points FreeIPA does not ensure CSRF protection. Due to implementation details one cannot use this flaw for reflection of a cookie representing already logged-in user. An attacker would always have to go through a new authentication attempt.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Freeipa | Freeipa | < 4.6.10 |
| Fedoraproject | Fedora | 38 |
| Redhat | Codeready Linux Builder | - |
| Redhat | Enterprise Linux | 7.0 |
| Redhat | Enterprise Linux Desktop | 7.0 |
| Redhat | Enterprise Linux Eus | 8.6 |
| Redhat | Enterprise Linux For Arm 64 Eus | 8.8 |
| Redhat | Enterprise Linux For Ibm Z Systems | 7.0 |
| Redhat | Enterprise Linux For Ibm Z Systems Eus | 8.6 |
| Redhat | Enterprise Linux For Power Big Endian | 7.0 |
| Redhat | Enterprise Linux For Power Little Endian | 7.0 |
| Redhat | Enterprise Linux For Power Little Endian Eus | 8.6 |
| Redhat | Enterprise Linux For Scientific Computing | 7.0 |
| Redhat | Enterprise Linux Server | 9.0 |
| Redhat | Enterprise Linux Server Aus | 8.2 |
| Redhat | Enterprise Linux Server For Ibm Z Systems | 9.2 |
| Redhat | Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions | 8.2 |
| Redhat | Enterprise Linux Server Tus | 8.2 |
| Redhat | Enterprise Linux Server Update Services For Sap Solutions | 8.2 |
| Redhat | Enterprise Linux Update Services For Sap Solutions | 9.0 |
Related Weaknesses (CWE)
References
- https://access.redhat.com/errata/RHSA-2024:0137Third Party Advisory
- https://access.redhat.com/errata/RHSA-2024:0138Third Party Advisory
- https://access.redhat.com/errata/RHSA-2024:0139Third Party Advisory
- https://access.redhat.com/errata/RHSA-2024:0140Third Party Advisory
- https://access.redhat.com/errata/RHSA-2024:0141Third Party Advisory
- https://access.redhat.com/errata/RHSA-2024:0142Third Party Advisory
- https://access.redhat.com/errata/RHSA-2024:0143Third Party Advisory
- https://access.redhat.com/errata/RHSA-2024:0144Third Party Advisory
- https://access.redhat.com/errata/RHSA-2024:0145Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2023-5455Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2242828Issue TrackingThird Party Advisory
- https://www.freeipa.org/release-notes/4-10-3.htmlRelease Notes
- https://www.freeipa.org/release-notes/4-11-1.htmlRelease Notes
- https://www.freeipa.org/release-notes/4-6-10.htmlRelease Notes
- https://www.freeipa.org/release-notes/4-9-14.htmlRelease Notes
FAQ
What is CVE-2023-5455?
CVE-2023-5455 is a vulnerability with a CVSS score of 6.5 (MEDIUM). A Cross-site request forgery vulnerability exists in ipa/session/login_password in all supported versions of IPA. This flaw allows an attacker to trick the user into submitting a request that could pe...
How severe is CVE-2023-5455?
CVE-2023-5455 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-5455?
Check the references section above for vendor advisories and patch information. Affected products include: Freeipa Freeipa, Fedoraproject Fedora, Redhat Codeready Linux Builder, Redhat Enterprise Linux, Redhat Enterprise Linux Desktop.