Описание
A flaw was found in FreeIPA. An unauthenticated remote attacker could exploit a DOM Cross-Site Scripting (XSS) vulnerability in the FreeIPA/IdM Web UI password reset page. By enticing a victim to click a specially crafted link and complete a password reset, the attacker could inject and execute arbitrary JavaScript code. This allows the attacker to perform actions within the victim's authenticated session, potentially leading to full administrative control if an IdM administrator is targeted.
Отчет
This is an Important flaw in the FreeIPA/IdM Web UI password reset page, allowing an unauthenticated remote attacker to execute arbitrary JavaScript. Exploitation requires a victim to click a crafted link and complete the password reset, potentially leading to full IdM administrative compromise if an administrator is targeted. This poses a significant risk to identity management infrastructure.
Меры по смягчению последствий
Restrict network access to the FreeIPA/IdM Web UI to trusted networks only. This can be achieved by configuring firewall rules to limit access to the IdM server's web interface (typically port 443 for HTTPS) from specific IP addresses or subnets. For example, using firewalld on RHEL, you can add a rich rule to allow access only from trusted sources. Ensure that any firewall changes are persistent across reboots and that the firewall service is reloaded or restarted for changes to take effect, which may temporarily disrupt access to the IdM Web UI.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 6 | ipa | Out of support scope | ||
| Red Hat Enterprise Linux 10 | ipa | Fixed | RHSA-2026:72279 | 28.09.2026 |
| Red Hat Enterprise Linux 10.0 Extended Update Support | ipa | Fixed | RHSA-2026:82935 | 14.10.2026 |
| Red Hat Enterprise Linux 7 Extended Lifecycle Support | ipa | Fixed | RHSA-2026:93071 | 30.10.2026 |
| Red Hat Enterprise Linux 8 | idm | Fixed | RHSA-2026:83460 | 15.10.2026 |
| Red Hat Enterprise Linux 8 | idm | Fixed | RHSA-2026:83460 | 15.10.2026 |
| Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | idm | Fixed | RHSA-2026:93452 | 02.11.2026 |
| Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | idm | Fixed | RHSA-2026:93452 | 02.11.2026 |
| Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On | idm | Fixed | RHSA-2026:93452 | 02.11.2026 |
| Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On | idm | Fixed | RHSA-2026:93452 | 02.11.2026 |
Показывать по
Дополнительная информация
Статус:
8.1 High
CVSS3
Связанные уязвимости
A flaw was found in FreeIPA. An unauthenticated remote attacker could exploit a DOM Cross-Site Scripting (XSS) vulnerability in the FreeIPA/IdM Web UI password reset page. By enticing a victim to click a specially crafted link and complete a password reset, the attacker could inject and execute arbitrary JavaScript code. This allows the attacker to perform actions within the victim's authenticated session, potentially leading to full administrative control if an IdM administrator is targeted.
A flaw was found in FreeIPA. An unauthenticated remote attacker could exploit a DOM Cross-Site Scripting (XSS) vulnerability in the FreeIPA/IdM Web UI password reset page. By enticing a victim to click a specially crafted link and complete a password reset, the attacker could inject and execute arbitrary JavaScript code. This allows the attacker to perform actions within the victim's authenticated session, potentially leading to full administrative control if an IdM administrator is targeted.
A flaw was found in FreeIPA. An unauthenticated remote attacker could ...
A flaw was found in FreeIPA. An unauthenticated remote attacker could exploit a DOM Cross-Site Scripting (XSS) vulnerability in the FreeIPA/IdM Web UI password reset page. By enticing a victim to click a specially crafted link and complete a password reset, the attacker could inject and execute arbitrary JavaScript code. This allows the attacker to perform actions within the victim's authenticated session, potentially leading to full administrative control if an IdM administrator is targeted.
8.1 High
CVSS3