Sensitive data could be exposed in world readable logs of cloud-init before version 22.3 when schema failures are reported. This leak could include hashed passwords.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
History
21 Nov 2024, 07:00
Type | Values Removed | Values Added |
---|---|---|
References | () https://github.com/canonical/cloud-init/commit/4d467b14363d800b2185b89790d57871f11ea88c - Patch | |
References | () https://ubuntu.com/security/notices/USN-5496-1 - Broken Link |
01 May 2023, 17:39
Type | Values Removed | Values Added |
---|---|---|
References | (MISC) https://github.com/canonical/cloud-init/commit/4d467b14363d800b2185b89790d57871f11ea88c - Patch | |
References | (MISC) https://ubuntu.com/security/notices/USN-5496-1 - Broken Link | |
CPE | cpe:2.3:o:canonical:ubuntu_linux:21.10:*:*:*:*:*:*:* cpe:2.3:o:canonical:ubuntu_linux:22.04:*:*:*:lts:*:*:* cpe:2.3:a:canonical:cloud-init:*:*:*:*:*:*:*:* cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:* cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:* |
|
CWE | CWE-532 | |
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.5 |
20 Apr 2023, 13:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2023-04-19 22:15
Updated : 2025-02-05 15:15
NVD link : CVE-2022-2084
Mitre link : CVE-2022-2084
CVE.ORG link : CVE-2022-2084
JSON object : View
Products Affected
canonical
- cloud-init
- ubuntu_linux
CWE
CWE-532
Insertion of Sensitive Information into Log File