#VU92249 Use of Password Hash With Insufficient Computational Effort in FreeIPA - CVE-2024-3183

Vulnerability identifier: #VU92249

Vulnerability risk: Low

CVSSv4.0: 2.9 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/U:Clear]

CVE-ID: CVE-2024-3183

CWE-ID: CWE-916

Exploitation vector: Network

Exploit availability: Yes

Vulnerable software:
FreeIPA
Other software / Other software solutions

Vendor: freeipa.org

Description

The vulnerability allows a remote attacker to gain access to sensitive information.

The vulnerability exists due to software uses principal key to encrypt tickets. A remote attacker can brute-force the principal key and decrypt communication between KDC and the client.

Mitigation
Install updates from vendor's website.

Vulnerable software versions

FreeIPA: 4.0.0 - 4.0.5, 4.1.0.alpha1 - 4.12.0, 4.2.0.alpha1 - 4.2.4, 4.3.0 - 4.3.3, 4.4.0 - 4.4.4, 4.5.0 - 4.5.4, 4.6.0 - 4.6.90.pre2, 4.7.0 - 4.7.90.pre1, 4.8.0 - 4.8.10, 4.9.0 rc1 - 4.9.14

---

External links
https://bugzilla.redhat.com/show_bug.cgi?id=2270685
https://www.freeipa.org/release-notes/4-12-1.html

---

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.