CVE-2023-5455 Ipa: invalid csrf protection
Attackers can trick users into performing unintended actions in FreeIPA due to missing CSRF protection on specific endpoints.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2023-5455?
CVE-2023-5455 is a medium-severity vulnerability in Fedoraproject Fedora, published on 10 Jan 2024. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
A Cross-site request forgery vulnerability exists in ipa/session/login_password in all supported versions of IPA. This flaw allows an attacker to trick the user into submitting a request that could perform actions as the user, resulting in a loss of confidentiality and system integrity. During community penetration testing it was found that for certain HTTP end-points FreeIPA does not ensure CSRF protection. Due to implementation details one cannot use this flaw for reflection of a cookie representing already logged-in user. An attacker would always have to go through a new authentication attempt.
Weakness: CWE-352
Which versions are affected by CVE-2023-5455?
It affects 21 products.
Linux distribution packages (40)
ipa-client AlmaLinux:9 | All versions | 4.10.2-5.el9_3.alma.1 |
ipa-client-common AlmaLinux:9 | All versions | 4.10.2-5.el9_3.alma.1 |
ipa-client-epn AlmaLinux:9 | All versions | 4.10.2-5.el9_3.alma.1 |
ipa-client-samba AlmaLinux:9 | All versions | 4.10.2-5.el9_3.alma.1 |
ipa-common AlmaLinux:9 | All versions | 4.10.2-5.el9_3.alma.1 |
ipa-selinux AlmaLinux:9 | All versions | 4.10.2-5.el9_3.alma.1 |
ipa-server AlmaLinux:9 | All versions | 4.10.2-5.el9_3.alma.1 |
ipa-server-common AlmaLinux:9 | All versions | 4.10.2-5.el9_3.alma.1 |
ipa-server-dns AlmaLinux:9 | All versions | 4.10.2-5.el9_3.alma.1 |
ipa-server-trust-ad AlmaLinux:9 | All versions | 4.10.2-5.el9_3.alma.1 |
python3-ipaclient AlmaLinux:9 | All versions | 4.10.2-5.el9_3.alma.1 |
python3-ipalib AlmaLinux:9 | All versions | 4.10.2-5.el9_3.alma.1 |
python3-ipaserver AlmaLinux:9 | All versions | 4.10.2-5.el9_3.alma.1 |
python3-ipatests AlmaLinux:9 | All versions | 4.10.2-5.el9_3.alma.1 |
ipa Red Hat:enterprise_linux:7::client | All versions | 0:4.6.8-5.el7_9.16 |
ipa-client Red Hat:enterprise_linux:7::client | All versions | 0:4.6.8-5.el7_9.16 |
ipa-client-common Red Hat:enterprise_linux:7::client | All versions | 0:4.6.8-5.el7_9.16 |
ipa-common Red Hat:enterprise_linux:7::client | All versions | 0:4.6.8-5.el7_9.16 |
ipa-debuginfo Red Hat:enterprise_linux:7::client | All versions | 0:4.6.8-5.el7_9.16 |
ipa-python-compat Red Hat:enterprise_linux:7::client | All versions | 0:4.6.8-5.el7_9.16 |
ipa-server Red Hat:enterprise_linux:7::client | All versions | 0:4.6.8-5.el7_9.16 |
ipa-server-common Red Hat:enterprise_linux:7::client | All versions | 0:4.6.8-5.el7_9.16 |
ipa-server-dns Red Hat:enterprise_linux:7::client | All versions | 0:4.6.8-5.el7_9.16 |
ipa-server-trust-ad Red Hat:enterprise_linux:7::client | All versions | 0:4.6.8-5.el7_9.16 |
python2-ipaclient Red Hat:enterprise_linux:7::client | All versions | 0:4.6.8-5.el7_9.16 |
python2-ipalib Red Hat:enterprise_linux:7::client | All versions | 0:4.6.8-5.el7_9.16 |
python2-ipaserver Red Hat:enterprise_linux:7::client | All versions | 0:4.6.8-5.el7_9.16 |
ipa-debuginfo Red Hat:enterprise_linux:7::computenode | All versions | 0:4.6.8-5.el7_9.16 |
ipa-server Red Hat:enterprise_linux:7::computenode | All versions | 0:4.6.8-5.el7_9.16 |
ipa-server-common Red Hat:enterprise_linux:7::computenode | All versions | 0:4.6.8-5.el7_9.16 |
ipa-server-dns Red Hat:enterprise_linux:7::computenode | All versions | 0:4.6.8-5.el7_9.16 |
ipa-server-trust-ad Red Hat:enterprise_linux:7::computenode | All versions | 0:4.6.8-5.el7_9.16 |
python2-ipaserver Red Hat:enterprise_linux:7::computenode | All versions | 0:4.6.8-5.el7_9.16 |
ipa Red Hat:enterprise_linux:7::server | All versions | 0:4.6.8-5.el7_9.16 |
ipa-client Red Hat:enterprise_linux:7::server | All versions | 0:4.6.8-5.el7_9.16 |
ipa-client-common Red Hat:enterprise_linux:7::server | All versions | 0:4.6.8-5.el7_9.16 |
ipa-common Red Hat:enterprise_linux:7::server | All versions | 0:4.6.8-5.el7_9.16 |
ipa-debuginfo Red Hat:enterprise_linux:7::server | All versions | 0:4.6.8-5.el7_9.16 |
ipa-python-compat Red Hat:enterprise_linux:7::server | All versions | 0:4.6.8-5.el7_9.16 |
ipa-server Red Hat:enterprise_linux:7::server | All versions | 0:4.6.8-5.el7_9.16 |
Products include Fedoraproject Fedora, Freeipa Freeipa, Redhat Codeready Linux Builder, Redhat Enterprise Linux, Redhat Enterprise Linux Desktop, Redhat Enterprise Linux Eus and 15 more.
How do I fix CVE-2023-5455?
Apply the vendor's patch.
Is CVE-2023-5455 being exploited?
There is no known exploitation of CVE-2023-5455 in the wild and no public exploit code.
Other vulnerabilities in Fedoraproject Fedora
Sources
Also known as ALSA-2024:0141, DEBIAN-CVE-2023-5455, GHSA-45hh-rj6v-548f, RHSA-2024:0138, RHSA-2024:0140, RHSA-2024:0141 and 4 more.