NetSight
medium5.5

CVE-2022-2084

Sensitive data could be exposed in world readable logs of cloud-init before version 22.3 when schema failures are reported.

Impact

Sensitive data could be exposed in world readable logs of cloud-init before version 22.3 when schema failures are reported. This leak could include hashed passwords.

Affected products

VendorProductAffected versions
CanonicalCloud-Init
before 22.3
CanonicalUbuntu Linux
Versions 18.04, 20.04, 21.10, 22.04

Weakness classification

References