PT-2023-17244
CVE-2023-1786
·
Published
2023-04-26
·
Updated
2026-09-30
Description by
CVSS 3.1
5.5
MediumMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
cloud-init versions prior to 23.1.2
Description
The issue allows sensitive data to be exposed in logs, which an attacker could use to find hashed passwords and possibly escalate their privilege.
Recommendations
For versions prior to 23.1.2, update to version 23.1.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the logs to minimize the risk of exploitation.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾