Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Patric Åhlin

#44997of 53,635
5.5Total CVSS
Vulnerabilities · 1
PT-2023-31896
5.5
2023-10-04
Subiquity · Subiquity · CVE-2023-5182
**Name of the Vulnerable Software and Affected Versions** subiquity versions 23.09.1 and earlier **Description** Sensitive data could be exposed in logs. An attacker in the adm group could use this information to find hashed passwords and possibly escalate their privilege. **Recommendations** For subiquity versions 23.09.1 and earlier, update to a version later than 23.09.1 to prevent sensitive data exposure. As a temporary workaround, consider restricting access to log files to minimize the risk of exploitation.