Lucene search
Alpine Linux Development TeamALPINE:CVE-2023-1786HistoryApr 26, 2023 - 11:15 p.m.
CVE-2023-1786
2023-04-2623:15:08
Alpine Linux Development Team
security.alpinelinux.org
29
sensitive data
cloud-init
logs
hashed passwords
privilege escalation
unix
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
0.0004 Low
EPSS
Percentile
15.5%
Sensitive data could be exposed in logs of cloud-init before version 23.1.2. An attacker could use this information to find hashed passwords and possibly escalate their privilege.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Alpine | edge-community | noarch | cloud-init | < 23.1.2-r0 | UNKNOWN |
| Alpine | 3.18-community | noarch | cloud-init | < 23.1.2-r0 | UNKNOWN |
| Alpine | 3.19-community | noarch | cloud-init | < 23.1.2-r0 | UNKNOWN |
| Alpine | 3.20-community | noarch | cloud-init | < 23.1.2-r0 | UNKNOWN |
Related
nessus
nessus
Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS / 23.04 : Cloud-init vulnerability (USN-6042-1)
2023-04-26 00:00:00
FreeBSD : cloud-init -- sensitive data exposure in cloud-init logs (02562a78-e6b7-11ed-b0ce-b42e991fc52e)
2023-05-01 00:00:00
CentOS 8 : cloud-init (CESA-2023:6943)
2023-11-14 00:00:00
cve
cve
CVE-2023-1786
2023-04-26 23:15:08
prion
prion
Privilege escalation
2023-04-26 23:15:00
openvas
openvas
Huawei EulerOS: Security Advisory for cloud-init (EulerOS-SA-2023-2805)
2023-09-11 00:00:00
Huawei EulerOS: Security Advisory for cloud-init (EulerOS-SA-2023-2781)
2023-09-11 00:00:00
Fedora: Security Advisory for cloud-init (FEDORA-2023-c17dde4052)
2023-05-08 00:00:00
ubuntu
ubuntu
Cloud-init vulnerability
2023-04-26 00:00:00
almalinux
almalinux
Moderate: cloud-init security, bug fix, and enhancement update
2023-11-07 00:00:00
Moderate: cloud-init security, bug fix, and enhancement update
2023-11-14 00:00:00
redhat
redhat
fedora
fedora
[SECURITY] Fedora 38 Update: cloud-init-23.1.2-1.fc38
2023-05-07 01:21:51
cbl_mariner
cbl_mariner
CVE-2023-1786 affecting package cloud-init for versions less than 22.4-3
2023-07-17 16:19:05
CVE-2023-1786 affecting package cloud-init 21.4-2
2023-07-28 23:16:55
nvd
nvd
CVE-2023-1786
2023-04-26 23:15:08
redhatcve
redhatcve
CVE-2023-1786
2023-04-27 05:52:40
cvelist
cvelist
CVE-2023-1786 sensitive data exposure in cloud-init logs
2023-04-26 22:23:47
osv
osv
CVE-2023-1786
2023-04-26 23:15:08
cloud-init vulnerability
2023-04-26 17:59:50
Moderate: cloud-init security, bug fix, and enhancement update
2023-11-07 00:00:00
freebsd
freebsd
cloud-init -- sensitive data exposure in cloud-init logs
2023-04-26 00:00:00
oraclelinux
oraclelinux
cloud-init security update
2023-04-27 00:00:00
cloud-init security, bug fix, and enhancement update
2023-11-11 00:00:00
cloud-init security update
2023-04-27 00:00:00
veracode
veracode
Privilege Escalation
2023-05-09 06:39:47
debiancve
debiancve
CVE-2023-1786
2023-04-26 23:15:08
ubuntucve
ubuntucve
CVE-2023-1786
2023-04-26 00:00:00
redos
redos
ROS-20240703-11
2024-07-03 00:00:00
photon
photon
Moderate Photon OS Security Update - PHSA-2023-5.0-0001
2023-05-02 00:00:00
Moderate Photon OS Security Update - PHSA-2023-4.0-0383
2023-04-28 00:00:00
Critical Photon OS Security Update - PHSA-2023-3.0-0578
2023-05-12 00:00:00
ibm
ibm
Security Bulletin: IBM QRadar SIEM contains multiple vulnerabilities
2024-04-11 18:19:49
Security Bulletin: IBM QRadar SIEM contains multiple vulnerabilities
2024-05-09 12:31:16
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
0.0004 Low
EPSS
Percentile
15.5%
Related for ALPINE:CVE-2023-1786