title: sensitive data exposure in cloud-init logs
description: When instructing cloud-init to set a random password for a new user account, versions before 21.2 would write that password to the world-readable log file /var/log/cloud-init-output.log. This could allow a local user to log in as another user.
problem types: CWE-532
affected:
{
collectionURL: https://github.com/canonical/cloud-init/releases
packageName: cloud-init
platforms: Linux
product: cloud-init
repo: https://github.com/canonical/cloud-init/
vendor: Canonical Ltd.
versions:
lessThan: 21.2, status: affected, version: 0, versionType: semver
}
metrics:
cvssV3_1: [
version: 3.1
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: NONE
availabilityImpact: NONE
baseSeverity: MEDIUM
baseScore: 5.5
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
]
format: CVSS