Medium severity5.5NVD Advisory· Published Apr 26, 2023· Updated Jun 17, 2026
CVE-2023-1786
CVE-2023-1786
Description
Sensitive data could be exposed in logs of cloud-init before version 23.1.2. An attacker could use this information to find hashed passwords and possibly escalate their privilege.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
24cpe:2.3:a:canonical:cloud-init:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:canonical:cloud-init:*:*:*:*:*:*:*:*range: <23.1.2
- (no CPE)range: <23.1.2
cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*+ 5 more
- cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:esm:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:22.04:*:*:*:lts:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:22.10:*:*:*:-:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:23.04:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*
- Range: <23.1.2
- Range: <23.1.2
- osv-coords12 versionspkg:rpm/almalinux/cloud-initpkg:rpm/opensuse/cloud-init&distro=openSUSE%20Leap%2015.4pkg:rpm/opensuse/cloud-init&distro=openSUSE%20Leap%2015.5pkg:rpm/opensuse/cloud-init&distro=openSUSE%20Tumbleweedpkg:rpm/suse/cloud-init&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Public%20Cloud%2012pkg:rpm/suse/cloud-init&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Public%20Cloud%2015%20SP1pkg:rpm/suse/cloud-init&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Public%20Cloud%2015%20SP2pkg:rpm/suse/cloud-init&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Public%20Cloud%2015%20SP3pkg:rpm/suse/cloud-init&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Public%20Cloud%2015%20SP4pkg:rpm/suse/cloud-init&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Public%20Cloud%2015%20SP5pkg:rpm/suse/cloud-init&distro=SUSE%20Linux%20Micro%206.0pkg:rpm/suse/cloud-init&distro=SUSE%20Linux%20Micro%206.1
< 23.1.1-11.el9.alma.1+ 11 more
- (no CPE)range: < 23.1.1-11.el9.alma.1
- (no CPE)range: < 23.1-150100.8.66.1
- (no CPE)range: < 23.1-150100.8.66.1
- (no CPE)range: < 23.1-2.1
- (no CPE)range: < 20.2-37.57.1
- (no CPE)range: < 23.1-150100.8.66.1
- (no CPE)range: < 23.1-150100.8.66.1
- (no CPE)range: < 23.1-150100.8.66.1
- (no CPE)range: < 23.1-150100.8.66.1
- (no CPE)range: < 23.1-150100.8.66.1
- (no CPE)range: < 25.1.3-1.1
- (no CPE)range: < 25.1.3-slfo.1.1_1.1
- Canonical Ltd./cloud-initv5Range: 0
Patches
Vulnerability mechanics
References
4- github.com/canonical/cloud-init/commit/a378b7e4f47375458651c0972e7cd813f6fe0a6bnvdPatch
- lists.fedoraproject.org/archives/list/[email protected]/message/ATBJSXPL2IOAD2LDQRKWPLIC7QXS44GZ/nvdMailing ListThird Party Advisory
- ubuntu.com/security/notices/USN-6042-1nvdThird Party Advisory
- bugs.launchpad.net/cloud-init/+bug/2013967nvdIssue Tracking
News mentions
0No linked articles in our index yet.