CVE-2023-5182mediumCWE-532

CVE-2023-5182: medium-severity vulnerability in Canonical Ltd. subiquity

Published · Updated

Follow this CVE+ Monitor subiquity

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.5epss 0.2%
Sensitive data could be exposed in logs of subiquity version 23.09.1 and earlier. An attacker in the adm group could use this information to find hashed passwords and possibly escalate their privilege.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Affected products
Canonical Ltd. · subiquity
Related CVEs — Canonical Ltd. subiquity

In the same product, most dangerous first.

CVE-2022-0555HIGHCVE-2022-0555EPSS 0.3%