CVE-2019-10195
Medium
Description
A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way that FreeIPA's batch processing API logged operations. This included passing user passwords in clear text on FreeIPA masters. Batch processing of commands with passwords as arguments or options is not performed by default in FreeIPA but is possible by third-party components. An attacker having access to system logs on FreeIPA masters could use this flaw to produce log file content with passwords exposed.
SeverityMedium
CVSS6.5
Exploit probability79. percentile1.8%
Product
Freeipa
PublishedNov 27, 2019
First seenNov 27, 2019
Weakness typeCWE-532CWE-532CWE-200Sensitive information exposure
How to fix
Update
- freeipa freeipa4.6.7, 4.7.4, 4.8.3 or later
- freeipa4.6.7, 4.7.4, 4.8.3 or later
- ipa4.6.7, 4.7.4, 4.8.3 or later
Vendor advisories
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLFL5XDCJ3WT6JCLCQVKHZBLHGW7PW4T/
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/67SEUWJAJ5RMH5K4Q6TS2I7HIMXUGNKF/
- access.redhat.com/errata/RHSA-2020:0378
- access.redhat.com/errata/RHBA-2019:4268
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| freeipa freeipa | 4.6.0 ≤ v < 4.6.7, 4.7.0 ≤ v < 4.7.4, 4.8.0 ≤ v < 4.8.3 | 4.6.7, 4.7.4, 4.8.3 |
| fedoraproject fedora | 30, 31 | — |
| freeipaPyPI | 4.6.0 ≤ v < 4.6.7, 4.7.0 ≤ v < 4.7.4, 4.8.0 ≤ v < 4.8.3, 4.6.1 ≤ v < 4.6.7 | 4.6.7, 4.7.4, 4.8.3 |
| ipaPyPI | 4.6.0 ≤ v < 4.6.7, 4.7.0 ≤ v < 4.7.4, 4.8.0 ≤ v < 4.8.3 | 4.6.7, 4.7.4, 4.8.3 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.