Skip to content
CVE PROGRAM SOURCE RECORD2.7 Low

CVE-2025-15480

Senstive information disclosure was affecting ubuntu-desktop-provision

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
canonical

Description

In Ubuntu, ubuntu-desktop-provision version 24.04.4 could leak sensitive user credentials during crash reporting. Upon installation failure, if a user submitted a bug report to Launchpad, ubuntu-desktop-provision could include the user's password hash in the attached logs.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Canonical Ubuntu

Default version status: unaffected

  • 0 to ≤ 24.04.4affected
  • 0 to ≤ 25.10affected
  • 0 to ≤ 25.04affected

References