Mike Stroyan discovered that cloud-init could log password hashes when
reporting schema failures. An attacker with access to these logs could
potentially use this to gain user credentials.
Intelligence View
⚡ tsecurity.de Intelligence
USN-5496-1: cloud-init vulnerability
Mike Stroyan discovered that cloud-init could log password hashes when reporting schema failures. An attacker with access to these logs could potentially use this to gain user credentials.
Reagiere als Erste:r — dein Feedback zählt!
SOCIAL SHARE CARD GENERATOR