TI-2023-05020 CVE-2023-5455 · GHSA-45hh-rj6v-548f
Ipa: invalid csrf protection
Priority LOW 30
A Cross-site request forgery vulnerability exists in ipa/session/login_password in all supported versions of IPA.
RHSA-2024:0144
idm:DL1 security update
Released 2024-01-10 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream AUS (v. 8.2) bind-dyndb-ldap-11.2-3.module+el8.2.0+4921+923e30d5.src::idm:DL1, bind-dyndb-ldap-11.2-3.module+el8.2.0+4921+923e30d5.x86_64::idm:DL1, custodia-0.6.0-3.module+el8.1.0+4098+f286395e.noarch::idm:DL1 +38
- Red Hat Enterprise Linux AppStream E4S (v. 8.2) bind-dyndb-ldap-11.2-3.module+el8.2.0+4921+923e30d5.ppc64le::idm:DL1, bind-dyndb-ldap-11.2-3.module+el8.2.0+4921+923e30d5.src::idm:DL1, bind-dyndb-ldap-11.2-3.module+el8.2.0+4921+923e30d5.x86_64::idm:DL1 +47
- Red Hat Enterprise Linux AppStream TUS (v. 8.2) bind-dyndb-ldap-11.2-3.module+el8.2.0+4921+923e30d5.src::idm:DL1, bind-dyndb-ldap-11.2-3.module+el8.2.0+4921+923e30d5.x86_64::idm:DL1, custodia-0.6.0-3.module+el8.1.0+4098+f286395e.noarch::idm:DL1 +38