Поиск уязвимостей
Количество 24
Количество 24
CVE-2020-8632
In cloud-init through 19.4, rand_user_password in cloudinit/config/cc_ ...
GHSA-rwhw-r234-9p3m
The default cloud-init configuration, in cloud-init 0.6.2 and newer, included "ssh_deletekeys: 0", disabling cloud-init's deletion of ssh host keys. In some environments, this could lead to instances created by cloning a golden master or template system, sharing ssh host keys, and being able to impersonate one another or conduct man-in-the-middle attacks.
ALT-PU-2018-2836
ALT-PU-2018-2836: package `cloud-init` update to version 18.4-alt1
GHSA-xcwr-9f5c-qg65
In cloud-init through 19.4, rand_user_password in cloudinit/config/cc_set_passwords.py has a small default pwlen value, which makes it easier for attackers to guess passwords.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| CVE-2020-8632 In cloud-init through 19.4, rand_user_password in cloudinit/config/cc_ ... | CVSS3: 5.5 | 0% Низкий | почти 7 лет назад |
| GHSA-rwhw-r234-9p3m The default cloud-init configuration, in cloud-init 0.6.2 and newer, included "ssh_deletekeys: 0", disabling cloud-init's deletion of ssh host keys. In some environments, this could lead to instances created by cloning a golden master or template system, sharing ssh host keys, and being able to impersonate one another or conduct man-in-the-middle attacks. | CVSS3: 7.1 | 0% Низкий | больше 4 лет назад |
| ALT-PU-2018-2836 ALT-PU-2018-2836: package `cloud-init` update to version 18.4-alt1 | CVSS3: 7.1 | 0% Низкий | почти 8 лет назад |
| GHSA-xcwr-9f5c-qg65 In cloud-init through 19.4, rand_user_password in cloudinit/config/cc_set_passwords.py has a small default pwlen value, which makes it easier for attackers to guess passwords. | 0% Низкий | больше 4 лет назад |
Уязвимостей на страницу