PT-2023-17244

CVE-2023-1786

·

Publicado

2023-04-26

·

Atualizado

2026-09-30

Descrição por

CVSS 3.1
5.5
Média
MétricasAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions cloud-init versions prior to 23.1.2
Description The issue allows sensitive data to be exposed in logs, which an attacker could use to find hashed passwords and possibly escalate their privilege.
Recommendations For versions prior to 23.1.2, update to version 23.1.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the logs to minimize the risk of exploitation.
Explorabilidade
Exploit
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Identificadores relacionados
ALSA-2023:6371
ALSA-2023:6943
ALT-PU-2023-1755
ALT-PU-2024-16941
ALT-PU-2024-16943
AZL-26342
CESA-2023_6943
CLEANSTART-2024-JF46935
OESA-2023-1297
OPENSUSE-SU-2024:13053-1
RHSA-2023:6371
RHSA-2023_6371
RHSA-2023:6943
RHSA-2023_6943
SUSE-FU-2023:3283-1
SUSE-SU-2023:2164-1
SUSE-SU-2023:2628-1
SUSE-SU-2024:0128-1
SUSE-SU-2024_0128-1
SUSE-SU-2025:20656-1
SUSE-SU-2025:20755-1
USN-6042-1
USN-6042-2
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾