Lucene search
+L

2 matches found

OSV
OSV
added 2021/10/29 7:32 p.m.9 views

MGASA-2021-0494 Updated cloud-init packages fix security vulnerability

cloud-init has the ability to generate and set a randomized password for system users. This functionality is enabled at runtime by passing cloud-config data such as: 'chpasswd: list: | user1:RANDOM' When instructing cloud-init to set a random password for a new user account, versions before 21.1....

5.5CVSS5.3AI score0.00219EPSS
SaveExploits0References4
Prion
Prion
added 2011/08/12 5:55 p.m.17 views

Design/Logic Flaw

IBM Tivoli Federated Identity Manager TFIM 6.2.0 before 6.2.0.2, when com.tivoli.am.fim.infocard.delegates.InfoCardSTSDelegate tracing is enabled, creates a cleartext log entry containing a password, which might allow local users to obtain sensitive information by reading the log data...

1.9CVSS6AI score0.0027EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder