Medium severity · published Oct 7, 2023
CVE-2023-5182
Sensitive data could be exposed in logs of subiquity version 23.09.1 and earlier
5.5
CVSS
0.2%
EPSS
No
On KEV
Description
Sensitive data could be exposed in logs of subiquity version 23.09.1 and earlier. An attacker in the adm group could use this information to find hashed passwords and possibly escalate their privilege.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 13% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SU
Subiquity · Canonical
through 23.09.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-5182
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-5182
Patch
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5182
Patch
https://github.com/canonical/subiquity/pull/1820/commits/62e126896fb063808767d74d00886001e38eaa1c
More from Subiquity
8.4
CVE-2022-0555
Subiquity Shows Guided Storage Passphrase in Plaintext with Read-all Permissions
2.3
CVE-2020-11932
It was discovered that the Subiquity installer for Ubuntu Server logged the LUKS full disk encryption password if one was entered