Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2020-8632
5.5
MEDIUMCVSS v3
Published
February 5, 2020
CVSS v2
2.1 LOW
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
In cloud-init through 19.4, rand_user_password in cloudinit/config/cc_set_passwords.py has a small default pwlen value, which makes it easier for attackers to guess passwords.
canonical/cloud-init
GitHubOfficial upstream for the cloud-init: cloud instance initialization
GitHubOfficial upstream for the cloud-init: cloud instance initialization<= 19.4NVD
Docker Hub