Bug 905206 (CVE-2023-1786)

Summary:	<app-emulation/cloud-init-23.4: secrets written to logs
Product:	Gentoo Security	Reporter:	John Helmert III <ajak>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	CONFIRMED ---
Severity:	minor	CC:	prometheanfire
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	https://bugs.launchpad.net/cloud-init/+bug/2013967
Whiteboard:	B4 [stable?]
Package list:		Runtime testing required:	---

Description John Helmert III archtester

2023-04-28 02:57:22 UTC

CVE-2023-1786:

Sensitive data could be exposed in logs of cloud-init before version 23.1.2. An attacker could use this information to find hashed passwords and possibly escalate their privilege.

Patch doesn't have an associated tag: https://github.com/canonical/cloud-init/commit/a378b7e4f47375458651c0972e7cd813f6fe0a6b):