high8.8
CVE-2024-6174
When a non-x86 platform is detected, cloud-init grants root access to a hardcoded url with a local IP address.
Impact
When a non-x86 platform is detected, cloud-init grants root access to a hardcoded url with a local IP address. To prevent this, cloud-init default configurations disable platform enumeration.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Canonical | Cloud-Init | before 25.1.3 |