PT-2023-17244 · Unknown+10 · Cloud-Init+10
James Golovich
·
Publicado
2023-04-26
·
Atualizado
2025-09-23
·
CVE-2023-1786
CVSS v3.1
5.5
Média
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
cloud-init versions prior to 23.1.2
Description
The issue allows sensitive data to be exposed in logs, which an attacker could use to find hashed passwords and possibly escalate their privilege.
Recommendations
For versions prior to 23.1.2, update to version 23.1.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the logs to minimize the risk of exploitation.
Correção
Insertion into Log File
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Almalinux
Astra Linux
Centos
Debian
Linuxmint
Red Hat
Red Os
Suse
Ubuntu
Cloud-Init