CVE-2023-1786
sensitive data exposure in cloud-init logs
Summary
sensitive data exposure in cloud-init logs
Original description
The description as published by the source.
Sensitive data could be exposed in logs of cloud-init before version 23.1.2. An attacker could use this information to find hashed passwords and possibly escalate their privilege.
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2023-1786 cloud-init
References
- advisory github.com
- advisory nvd.nist.gov
- advisory ubuntu.com
- package github.com
- patch github.com
- report bugs.launchpad.net
- web github.com
- web lists.fedoraproject.org