Published: 26/04/2023 Updated: 08/05/2023

CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8

VMScore: 0

Sensitive data could be exposed in logs of cloud-init before version 23.1.2. An attacker could use this information to find hashed passwords and possibly escalate their privilege.

Vulnerable Product	Search on Vulmon	Subscribe to Product
canonical ubuntu linux 20.04
canonical ubuntu linux 16.04
canonical ubuntu linux 18.04
canonical ubuntu linux 22.04
canonical ubuntu linux 22.10
canonical ubuntu linux 23.04
canonical cloud-init
fedoraproject fedora 38

Synopsis Moderate: cloud-init security, bug fix, and enhancement update Type/Severity Security Advisory: Moderate Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for cloud-init is now available for Red Hat Enterprise Linux 9Red Hat Product Security has ...

Debian Bug report logs - #1035023 cloud-init: CVE-2023-1786 Package: src:cloud-init; Maintainer for src:cloud-init is Debian Cloud Team <debian-cloud@listsdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Thu, 27 Apr 2023 19:33:02 UTC Severity: important Tags: security, upstream Found in vers ...

DescriptionThe MITRE CVE dictionary describes this issue as: Sensitive data could be exposed in logs of cloud-init before version 2312 An attacker could use this information to find hashed passwords and possibly escalate their privilege ...

CWE-532 https://bugs.launchpad.net/cloud-init/+bug/2013967 https://ubuntu.com/security/notices/USN-6042-1 https://github.com/canonical/cloud-init/commit/a378b7e4f47375458651c0972e7cd813f6fe0a6b https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ATBJSXPL2IOAD2LDQRKWPLIC7QXS44GZ/https://access.redhat.com/errata/RHSA-2023:6371 https://nvd.nist.gov https://access.redhat.com/security/cve/cve-2023-1786

CVE-2023-1786

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect