{"action":"Upgrade freeipa to 4.6.7 or later.","affected":[{"fixed":"4.6.7","introduced":"4.6.0"},{"fixed":"4.7.4","introduced":"4.7.0"},{"fixed":"4.8.3","introduced":"4.8.0"}],"component":"freeipa","cve_ids":["CVE-2019-10195"],"ecosystem":"PyPI","epss":0.01806,"exploited":false,"fixed_versions":["4.6.7","4.7.4","4.8.3"],"ghsa_id":"GHSA-w4q7-f34x-vpgc","id":"tcs_01M5KG1CGMAN3EGGV1Z96R8WN6","modified_at":"2024-09-20T18:12:38.982302Z","published_at":"2022-05-24T17:02:16Z","references":["https://osv.dev/vulnerability/GHSA-w4q7-f34x-vpgc","https://nvd.nist.gov/vuln/detail/CVE-2019-10195","https://access.redhat.com/errata/RHBA-2019:4268","https://access.redhat.com/errata/RHSA-2020:0378","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10195","https://github.com/hatchetation/freeipa","https://github.com/pypa/advisory-database/tree/main/vulns/freeipa/PYSEC-2019-22.yaml","https://github.com/pypa/advisory-database/tree/main/vulns/ipa/PYSEC-2019-168.yaml","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/67SEUWJAJ5RMH5K4Q6TS2I7HIMXUGNKF","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WLFL5XDCJ3WT6JCLCQVKHZBLHGW7PW4T","https://pagure.io/freeipa/c/5913826a4654a115cd5ff2dbf4a2b3ad38a93081","https://www.freeipa.org/page/Releases/4.6.7","https://www.freeipa.org/page/Releases/4.7.4","https://www.freeipa.org/page/Releases/4.8.3"],"severity":{"label":"medium","score":5.7},"sources":[{"source":"osv","source_id":"GHSA-w4q7-f34x-vpgc","url":"https://osv.dev/vulnerability/GHSA-w4q7-f34x-vpgc"}],"summary":"FreeIPA logs passwords embedded in commands in calls using batch"}