Red Hat Security Advisory

RHSA-2021:3081

cloud-init security update

Released 2021-08-10 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) cloud-init-20.3-10.el8_4.5

Fixes 1 record

TI-2021-02393 CVE-2021-3429 · GHSA-jj89-4799-j2qv

sensitive data exposure in cloud-init logs

LOW 24

When instructing cloud-init to set a random password for a new user account, versions before 21.2 would write that password to the world-readable log file /var/log/cloud-init-output.log.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00219 Published 2023-04-19 Partial fix · 21.2 CWE-532