CVE-2019-10195 FreeIPA logs passwords embedded in commands in calls using batch
MediumCVSS 6.5
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way that FreeIPA's batch processing API logged operations. This included passing user passwords in clear text on FreeIPA masters. Batch processing of commands with passwords as arguments or options is not performed by default in FreeIPA but is possible by third-party components. An attacker having access to system logs on FreeIPA masters could use this flaw to produce log file content with passwords exposed.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pypi freeipa(PyPI) | >= 4.6.0, < 4.6.7 | 4.6.7 |
| pypi freeipa(PyPI) | = 4.6.1 | No fix listed |
| pypi freeipa(PyPI) | = 4.6.2 | No fix listed |
| pypi freeipa(PyPI) | = 4.6.3 | No fix listed |
| pypi freeipa(PyPI) | = 4.6.4 | No fix listed |
| pypi freeipa(PyPI) | = 4.6.5 | No fix listed |
| pypi freeipa(PyPI) | >= 4.7.0, < 4.7.4 | 4.7.4 |
| pypi freeipa(PyPI) | = 4.7.0 | No fix listed |
| pypi freeipa(PyPI) | = 4.7.1 | No fix listed |
| pypi freeipa(PyPI) | = 4.7.2 | No fix listed |
| pypi freeipa(PyPI) | >= 4.8.0, < 4.8.3 | 4.8.3 |
| pypi freeipa(PyPI) | = 4.8.0 | No fix listed |
| pypi freeipa(PyPI) | = 4.8.1 | No fix listed |
| pypi freeipa(PyPI) | = 4.8.2 | No fix listed |
| pypi ipa(PyPI) | >= 4.6.0, < 4.6.7 | 4.6.7 |
| pypi ipa(PyPI) | = 4.6.2 | No fix listed |
| pypi ipa(PyPI) | = 4.6.3 | No fix listed |
| pypi ipa(PyPI) | = 4.6.4 | No fix listed |
| pypi ipa(PyPI) | = 4.6.5 | No fix listed |
| pypi ipa(PyPI) | >= 4.7.0, < 4.7.4 | 4.7.4 |
| pypi ipa(PyPI) | = 4.7.0 | No fix listed |
| pypi ipa(PyPI) | = 4.7.1 | No fix listed |
| pypi ipa(PyPI) | = 4.7.2 | No fix listed |
| pypi ipa(PyPI) | >= 4.8.0, < 4.8.3 | 4.8.3 |
| pypi ipa(PyPI) | = 4.8.0 | No fix listed |
Show 15 more
| Product | Affected versions | Fixed in |
|---|---|---|
| pypi ipa(PyPI) | = 4.8.1 | No fix listed |
| pypi ipa(PyPI) | = 4.8.2 | No fix listed |
| pypi freeipa(PyPI) | >= 4.6.1, < 4.6.7 | 4.6.7 |
| ubuntu/freeipa(Ubuntu:22.04) | All versions | No fix listed |
| debian/freeipa(Debian:12) | < 4.8.3-1 | 4.8.3-1 |
| debian/freeipa(Debian:13) | < 4.8.3-1 | 4.8.3-1 |
| debian/freeipa(Debian:14) | < 4.8.3-1 | 4.8.3-1 |
| freeipa | >= 4.6.0, < 4.6.7 | 4.6.7 |
| freeipa | >= 4.7.0, < 4.7.4 | 4.7.4 |
| freeipa | >= 4.8.0, < 4.8.3 | 4.8.3 |
| fedoraproject fedora | = 30 | No fix listed |
| fedoraproject fedora | = 31 | No fix listed |
| redhat/ipa | = all IPA 4.6.x versions before 4.6.7 | No fix listed |
| redhat/ipa | = all IPA 4.7.x versions before 4.7.4 | No fix listed |
| redhat/ipa | = all IPa 4.8.x versions before 4.8.3 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- RHBA-2019:4268 vendor-advisory
- RHSA-2020:0378 vendor-advisory
- bugzilla.redhat.com issue-tracking third-party-advisory
- github.com product
- github.com
- github.com
- lists.fedoraproject.org
- lists.fedoraproject.org
- pagure.io
- www.freeipa.org release-notes
- www.freeipa.org release-notes
- www.freeipa.org release-notes
- github.com vendor-advisory
- Ubuntu CVE tracker vendor-advisory
- www.cve.org
- Debian Security Tracker CVE-2019-10195 vendor-advisory
- FEDORA-2019-c64e1612f5 vendor-advisory
- FEDORA-2019-8e9093da55 vendor-advisory