Red Hat Enterprise Linux & Oracle Linux (IPA): Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen

Summary

Product

Vulnerabilities 1

• Medium 6.5
  CVE-2023-5455

  Ipa: invalid csrf protection

  A Cross-site request forgery vulnerability exists in ipa/session/login_password in all supported versions of IPA. This flaw allows an attacker to trick the user into submitting a request that could perform actions as the user, resulting in a loss of confident…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu
  Jan 10, 2024

Revision history

1. 2024-02-19 #4

   Neue Updates von Amazon aufgenommen

2. 2024-01-14 #3

   Neue Updates von CentOS und Oracle Linux aufgenommen

3. 2024-01-11 #2

   Neue Updates von Oracle Linux aufgenommen

4. 2024-01-10 #1

   Initiale Fassung

References

• Red Hat Security Advisory vom 2024-01-10
  https://access.redhat.com/security/cve/CVE-2023-5455
• Red Hat Bugzilla – Bug 2242828 vom 2024-01-10
  https://bugzilla.redhat.com/show_bug.cgi?id=2242828
• Github Advisory vom 2024-01-10
  https://github.com/advisories/GHSA-45hh-rj6v-548f
• Oracle Advisory vom 2024-01-10
  https://linux.oracle.com/cve/CVE-2023-5455.html
• Red Hat Security Advisory RHSA-2024-0137 vom 2024-01-10
  https://access.redhat.com/errata/RHSA-2024:0137
• Red Hat Security Advisory RHSA-2024-0138 vom 2024-01-10
  https://access.redhat.com/errata/RHSA-2024:0138
• Red Hat Security Advisory RHSA-2024-0139 vom 2024-01-10
  https://access.redhat.com/errata/RHSA-2024:0139
• Red Hat Security Advisory RHSA-2024-0140 vom 2024-01-10
  https://access.redhat.com/errata/RHSA-2024:0140
• Red Hat Security Advisory RHSA-2024-0141 vom 2024-01-10
  https://access.redhat.com/errata/RHSA-2024:0141
• Red Hat Security Advisory RHSA-2024-0142 vom 2024-01-10
  https://access.redhat.com/errata/RHSA-2024:0142
• Red Hat Security Advisory RHSA-2024-0143 vom 2024-01-10
  https://access.redhat.com/errata/RHSA-2024:0143
• Red Hat Security Advisory RHSA-2024-0144 vom 2024-01-10
  https://access.redhat.com/errata/RHSA-2024:0144
• Red Hat Security Advisory RHSA-2024-0145 vom 2024-01-10
  https://access.redhat.com/errata/RHSA-2024:0145
• Oracle Linux Security Advisory ELSA-2024-0141 vom 2024-01-11
  https://linux.oracle.com/errata/ELSA-2024-0141.html
• CentOS Security Advisory CESA-2024:0145 vom 2024-01-12
  https://lists.centos.org/pipermail/centos-announce/2024-January/099176.html
• Oracle Linux Security Advisory ELSA-2024-0143 vom 2024-01-13
  https://linux.oracle.com/errata/ELSA-2024-0143.html
• Amazon Linux Security Advisory ALAS-2024-2457 vom 2024-02-19
  https://alas.aws.amazon.com/AL2/ALAS-2024-2457.html