VULNERABILITY INTELLIGENCE

CVE-2023-5182

CVSS score5.5 MEDIUM
EPSS probability0.22%
CISA KEVNot currently listed
Published2023-10-07
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Description

Sensitive data could be exposed in logs of subiquity version 23.09.1 and earlier. An attacker in the adm group could use this information to find hashed passwords and possibly escalate their privilege.

Weakness classification

  • security@ubuntu.com: CWE-532
  • nvd@nist.gov: CWE-532

Primary references