Summary
James Golovich discovered that sensitive data could be exposed in logs. An
attacker could use this information to find hashed passwords and possibly
escalate their privilege.
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | cloud-init | 23.1.2-0ubuntu0~18.04.1 |
| Ubuntu · 20.04 LTS 20.04:LTS | cloud-init | 23.1.2-0ubuntu0~20.04.1 |
| Ubuntu · 22.04 LTS 22.04:LTS | cloud-init | 23.1.2-0ubuntu0~22.04.1 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | cloud-init | 21.1-19-gbad84ad4-0ubuntu1~16.04.4 |
Vulnerabilities 1
-
Medium 5.5
sensitive data exposure in cloud-init logs
Sensitive data could be exposed in logs of cloud-init before version 23.1.2. An attacker could use this information to find hashed passwords and possibly escalate their privilege.