TI-2023-05020 CVE-2023-5455 · GHSA-45hh-rj6v-548f
Ipa: invalid csrf protection
Priority LOW 30
A Cross-site request forgery vulnerability exists in ipa/session/login_password in all supported versions of IPA.
RHSA-2024:0138
idm:DL1 security update
Released 2024-01-10 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream AUS (v.8.4) bind-dyndb-ldap-11.6-2.module+el8.4.0+9328+4ec4e316.src::idm:DL1, bind-dyndb-ldap-11.6-2.module+el8.4.0+9328+4ec4e316.x86_64::idm:DL1, custodia-0.6.0-3.module+el8.1.0+4098+f286395e.noarch::idm:DL1 +39
- Red Hat Enterprise Linux AppStream E4S (v.8.4) bind-dyndb-ldap-11.6-2.module+el8.4.0+9328+4ec4e316.aarch64::idm:DL1, bind-dyndb-ldap-11.6-2.module+el8.4.0+9328+4ec4e316.ppc64le::idm:DL1, bind-dyndb-ldap-11.6-2.module+el8.4.0+9328+4ec4e316.s390x::idm:DL1 +47
- Red Hat Enterprise Linux AppStream TUS (v.8.4) bind-dyndb-ldap-11.6-2.module+el8.4.0+9328+4ec4e316.src::idm:DL1, bind-dyndb-ldap-11.6-2.module+el8.4.0+9328+4ec4e316.x86_64::idm:DL1, custodia-0.6.0-3.module+el8.1.0+4098+f286395e.noarch::idm:DL1 +39