CVE-2023-5182 — Canonical Ltd. / subiquity

CVE-2023-5182

Canonical Ltd. / subiquity PUBLISHED

Description (CNA)

Sensitive data could be exposed in logs of subiquity version 23.09.1 and earlier. An attacker in the adm group could use this information to find hashed passwords and possibly escalate their privilege.

Affected (CNA)

Vendor / product	Versions
Canonical Ltd. / subiquity	affected 0 through 23.09.1

CWE

CWE-532

References

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5182
https://github.com/canonical/subiquity/pull/1820/commits/62e126896fb063808767d74d00886001e38eaa1c

ADP enrichment

CVE

No English description supplied.

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5182
https://github.com/canonical/subiquity/pull/1820/commits/62e126896fb063808767d74d00886001e38eaa1c

CISA-ADP

No English description supplied.

No references supplied.