Skip to content
CVE PROGRAM SOURCE RECORD5.5 Medium

CVE-2022-2084

sensitive data exposure in cloud-init logs

Description

Sensitive data could be exposed in world readable logs of cloud-init before version 22.3 when schema failures are reported. This leak could include hashed passwords.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Canonical Ltd. cloud-init

  • 0 to < 23.0affected

References