PT-2023-17244

CVE-2023-1786

·

Published

2023-04-26

·

Updated

2026-09-30

Description by

CVSS 3.1
5.5
Medium
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions cloud-init versions prior to 23.1.2
Description The issue allows sensitive data to be exposed in logs, which an attacker could use to find hashed passwords and possibly escalate their privilege.
Recommendations For versions prior to 23.1.2, update to version 23.1.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the logs to minimize the risk of exploitation.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
ALSA-2023:6371
ALSA-2023:6943
ALT-PU-2023-1755
ALT-PU-2024-16941
ALT-PU-2024-16943
AZL-26342
CESA-2023_6943
CLEANSTART-2024-JF46935
OESA-2023-1297
OPENSUSE-SU-2024:13053-1
RHSA-2023:6371
RHSA-2023_6371
RHSA-2023:6943
RHSA-2023_6943
SUSE-FU-2023:3283-1
SUSE-SU-2023:2164-1
SUSE-SU-2023:2628-1
SUSE-SU-2024:0128-1
SUSE-SU-2024_0128-1
SUSE-SU-2025:20656-1
SUSE-SU-2025:20755-1
USN-6042-1
USN-6042-2
Found an issue in the description? Have something to add? Feel free to write us 👾