ISOMAN

CVE

CVE-2022-2084

Sensitive data could be exposed in world readable logs of cloud-init before version 22.3 when schema failures are reported. This leak could include hashed passwords.

Severity
MEDIUM
CVSS
5.5
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu22.04.5 amd64 desktopunknownsource
Ubuntu22.04.5 amd64 live-serverunknownsource
Ubuntu20.04.6 amd64 desktopunknownsource
Ubuntu20.04.6 amd64 live-serverunknownsource
Ubuntu18.04.6 amd64 desktopunknownsource
Ubuntu18.04.6 amd64 live-serverunknownsource

References

  1. https://github.com/canonical/cloud-init/commit/4d467b14363d800b2185b89790d57871f11ea88c
  2. https://ubuntu.com/security/notices/USN-5496-1
  3. https://github.com/canonical/cloud-init/commit/4d467b14363d800b2185b89790d57871f11ea88c
  4. https://ubuntu.com/security/notices/USN-5496-1