CVE-2022-2084
sensitive data exposure in cloud-init logs
Summary
sensitive data exposure in cloud-init logs
Original description
The description as published by the source.
Sensitive data could be exposed in world readable logs of cloud-init before version 22.3 when schema failures are reported. This leak could include hashed passwords.
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2022-2084 cloud-init Fixed in: 22.2-2
References
- advisory github.com
- advisory nvd.nist.gov
- advisory ubuntu.com
- package github.com
- patch github.com
- web github.com