Sensitive data could be exposed in logs of cloud-init before version 23.1.2. An attacker could use this information to find hashed passwords and possibly escalate their privilege.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade cloud-init | Nov 16, 2023 | Apr 26, 2023 |
| Alpine Linux | — | Upgrade cloud-init | Aug 22, 2024 | Apr 26, 2023 |
| Amazon Linux Ami 2 | — | Upgrade cloud-init | Nov 18, 2024 | Apr 26, 2023 |
| Centos_linux | — | Upgrade cloud-init | Nov 8, 2023 | Apr 26, 2023 |
| Debian | — | Upgrade cloud-initNo solution exists | May 15, 2025 | Apr 26, 2023 |
| Freebsd | — | Upgrade cloud-init-develUpgrade cloud-init | May 2, 2023 | Apr 29, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade cloud-init | Jan 10, 2024 | Apr 26, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade cloud-init | Jan 10, 2024 | Apr 26, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade cloud-init | Jan 10, 2024 | Apr 26, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade cloud-init | Aug 9, 2023 | Apr 26, 2023 |
| Oracle_linux | — | Upgrade cloud-init | Apr 28, 2023 | Apr 27, 2023 |
| Redhat_linux | — | Upgrade cloud-init | Nov 8, 2023 | Apr 26, 2023 |
| Suse | — | Upgrade cloud-initUpgrade cloud-init-config-suseUpgrade cloud-init-doc | May 11, 2023 | Apr 26, 2023 |
| Ubuntu | — | Upgrade cloud-init | May 1, 2023 | Apr 26, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 26, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub