CVE-2020-8632

Опубликовано: 05 фев. 2020

Источник: nvd

CVSS3: 5.5

CVSS2: 2.1

EPSS Низкий

Описание

In cloud-init through 19.4, rand_user_password in cloudinit/config/cc_set_passwords.py has a small default pwlen value, which makes it easier for attackers to guess passwords.

Ссылки

http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00042.html
Mailing List
Third Party Advisory
https://bugs.launchpad.net/ubuntu/+source/cloud-init/+bug/1860795
Issue Tracking
Patch
Third Party Advisory
https://github.com/canonical/cloud-init/pull/189
Patch
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2020/02/msg00021.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00042.html
Mailing List
Third Party Advisory
https://bugs.launchpad.net/ubuntu/+source/cloud-init/+bug/1860795
Issue Tracking
Patch
Third Party Advisory
https://github.com/canonical/cloud-init/pull/189
Patch
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2020/02/msg00021.html
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:canonical:cloud-init:*:*:*:*:*:*:*:*

Версия до 19.4 (включая)

Конфигурация 2

cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*

Конфигурация 3

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

EPSS

Процентиль: 27%

0.00097

Низкий

5.5 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-521

Связанные уязвимости

CVE-2020-8632

CVSS3: 5.5

ubuntu

около 6 лет назад

In cloud-init through 19.4, rand_user_password in cloudinit/config/cc_set_passwords.py has a small default pwlen value, which makes it easier for attackers to guess passwords.

CVE-2020-8632

CVSS3: 8.1

redhat

около 6 лет назад

In cloud-init through 19.4, rand_user_password in cloudinit/config/cc_set_passwords.py has a small default pwlen value, which makes it easier for attackers to guess passwords.

CVE-2020-8632

CVSS3: 5.5

msrc

больше 5 лет назад

In cloud-init through 19.4 rand_user_password in cloudinit/config/cc_set_passwords.py has a small default pwlen value which makes it easier for attackers to guess passwords.

CVE-2020-8632

CVSS3: 5.5

debian

около 6 лет назад

In cloud-init through 19.4, rand_user_password in cloudinit/config/cc_ ...

GHSA-xcwr-9f5c-qg65

github

больше 3 лет назад

In cloud-init through 19.4, rand_user_password in cloudinit/config/cc_set_passwords.py has a small default pwlen value, which makes it easier for attackers to guess passwords.

EPSS

Процентиль: 27%

0.00097

Низкий

5.5 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-521