Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-24q9-g4p7-45qp

Опубликовано: 09 апр. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 2.7
CVSS3: 9.1

Описание

In Ubuntu, ubuntu-desktop-provision version 24.04.4 could leak sensitive user credentials during crash reporting. Upon installation failure, if a user submitted a bug report to Launchpad, ubuntu-desktop-provision could include the user's password hash in the attached logs.

In Ubuntu, ubuntu-desktop-provision version 24.04.4 could leak sensitive user credentials during crash reporting. Upon installation failure, if a user submitted a bug report to Launchpad, ubuntu-desktop-provision could include the user's password hash in the attached logs.

EPSS

Процентиль: 23%
0.00307
Низкий

2.7 Low

CVSS4

9.1 Critical

CVSS3

Дефекты

CWE-1258

Связанные уязвимости

CVSS3: 9.1
ubuntu
4 месяца назад

In Ubuntu, ubuntu-desktop-provision version 24.04.4 could leak sensitive user credentials during crash reporting. Upon installation failure, if a user submitted a bug report to Launchpad, ubuntu-desktop-provision could include the user's password hash in the attached logs.

CVSS3: 9.1
nvd
4 месяца назад

In Ubuntu, ubuntu-desktop-provision version 24.04.4 could leak sensitive user credentials during crash reporting. Upon installation failure, if a user submitted a bug report to Launchpad, ubuntu-desktop-provision could include the user's password hash in the attached logs.

EPSS

Процентиль: 23%
0.00307
Низкий

2.7 Low

CVSS4

9.1 Critical

CVSS3

Дефекты

CWE-1258