CVE-2024-3183 is a vulnerability in the FreeIPA component of Red Hat Identity Management (IdM) where a user can obtain password hashes of all domain users, facilitating offline brute force attacks. The vulnerability is rated as important by Red Hat Product Security and affects multiple Red Hat Enterprise Linux 9.0 Extended Update Support variants and related packages. Red Hat has issued an update (ipa-4.9.8-11.el9_0.3) to fix this issue. No CVSS score is provided in the advisory.

An attacker with access to the system could extract password hashes for all domain users and attempt offline brute force attacks to recover passwords. This compromises the confidentiality of user credentials within the domain, potentially leading to unauthorized access if passwords are cracked.

Red Hat has released an official security update (ipa-4.9.8-11.el9_0.3 and related packages) that fixes this vulnerability. Users should apply this update promptly. Before applying, ensure all previously released errata relevant to the system are applied. Refer to Red Hat's official update instructions at https://access.redhat.com/articles/11258. No additional mitigation is stated by the vendor.