CVE-2019-10195

CVE-2019-10195 is a medium-severity information disclosure vulnerability affecting FreeIPA versions 4.6.x before 4.6.7, 4.7.x before 4.7.4, and 4.8.x before 4.8.3. The flaw involves FreeIPA's batch processing API logging user passwords in cleartext on FreeIPA masters, particularly when third-party components utilize batch commands with password arguments. An attacker with access to system logs on FreeIPA masters could exploit this to retrieve exposed passwords. The CVSS score is 6.5, indicating a network-based attack with low complexity and privileges, leading to high confidentiality impact. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this vulnerability.