CVE-2022-2084

Name of the Vulnerable Software and Affected Versions cloud-init versions prior to 22.3

Description Sensitive data could be exposed in world-readable logs of cloud-init when schema failures are reported, potentially including hashed passwords. This issue may allow an attacker to gain unauthorized access to information.

Recommendations For versions prior to 22.3, update to version 22.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the world-readable logs to minimize the risk of exploitation.