CVE-2017-12169

CVE-2017-12169 describes a vulnerability in FreeIPA versions 4.2.0 and later where users with 'System: Read Stage Users' permission could access password hashes of "Stage Users." This high-severity flaw (CVSS 7.5) allows a remote, authenticated attacker to disclose these hashes, though it does not affect active standard user accounts. Despite its severity, there is no known active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this vulnerability.