Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2022-2084

Опубликовано: 20 апр. 2023
Источник: redhat
CVSS3: 5.5
EPSS Низкий

Описание

Sensitive data could be exposed in world readable logs of cloud-init before version 22.3 when schema failures are reported. This leak could include hashed passwords.

A vulnerability was found in cloud-init. With this flaw, sensitive data could be exposed in world-readable cloud-init logs when schema failures are reported. This issue leak could include hashed passwords.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 6cloud-initNot affected
Red Hat Enterprise Linux 7cloud-initNot affected
Red Hat Enterprise Linux 8cloud-initNot affected
Red Hat Enterprise Linux 9cloud-initNot affected

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-200
https://bugzilla.redhat.com/show_bug.cgi?id=2188198cloud-init: vulnerable to expose sensitive information

EPSS

Процентиль: 5%
0.00026
Низкий

5.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.5
ubuntu
около 2 лет назад

Sensitive data could be exposed in world readable logs of cloud-init before version 22.3 when schema failures are reported. This leak could include hashed passwords.

CVSS3: 5.5
nvd
около 2 лет назад

Sensitive data could be exposed in world readable logs of cloud-init before version 22.3 when schema failures are reported. This leak could include hashed passwords.

CVSS3: 5.5
msrc
около 2 лет назад

Описание отсутствует

CVSS3: 5.5
debian
около 2 лет назад

Sensitive data could be exposed in world readable logs of cloud-init b ...

CVSS3: 5.5
github
около 2 лет назад

Sensitive data could be exposed in world readable logs of cloud-init before version 22.3 when schema failures are reported. This leak could include hashed passwords.

EPSS

Процентиль: 5%
0.00026
Низкий

5.5 Medium

CVSS3