ID de Prueba:	1.3.6.1.4.1.25623.1.0.884330
Categoría:	CentOS Local Security Checks
Título:	CentOS: Security Advisory for ipa-client (CESA-2024:0145)
Resumen:	The remote host is missing an update for the 'ipa-client'; package(s) announced via the CESA-2024:0145 advisory.
Descripción:	Summary: The remote host is missing an update for the 'ipa-client' package(s) announced via the CESA-2024:0145 advisory. Vulnerability Insight: Red Hat Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments. Security Fix(es): * ipa: Invalid CSRF protection (CVE-2023-5455) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Affected Software/OS: 'ipa-client' package(s) on CentOS 7. Solution: Please install the updated package(s). CVSS Score: 7.8 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:C/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2023-5455 RHBZ#2242828 https://bugzilla.redhat.com/show_bug.cgi?id=2242828 RHSA-2024:0137 https://access.redhat.com/errata/RHSA-2024:0137 RHSA-2024:0138 https://access.redhat.com/errata/RHSA-2024:0138 RHSA-2024:0139 https://access.redhat.com/errata/RHSA-2024:0139 RHSA-2024:0140 https://access.redhat.com/errata/RHSA-2024:0140 RHSA-2024:0141 https://access.redhat.com/errata/RHSA-2024:0141 RHSA-2024:0142 https://access.redhat.com/errata/RHSA-2024:0142 RHSA-2024:0143 https://access.redhat.com/errata/RHSA-2024:0143 RHSA-2024:0144 https://access.redhat.com/errata/RHSA-2024:0144 RHSA-2024:0145 https://access.redhat.com/errata/RHSA-2024:0145 RHSA-2024:0252 https://access.redhat.com/errata/RHSA-2024:0252 https://access.redhat.com/security/cve/CVE-2023-5455 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U76DAZZVY7V4XQBOOV5ETPTHW3A6MW5O/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UFNUQH7IOHTKCTKQWFHONWGUBOUANL6I/ https://www.freeipa.org/release-notes/4-10-3.html https://www.freeipa.org/release-notes/4-11-1.html https://www.freeipa.org/release-notes/4-6-10.html https://www.freeipa.org/release-notes/4-9-14.html
Copyright	Copyright (C) 2024 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.