CVE-2020-8632

In cloud-init through 19.4, rand_user_password in cloudinit/config/cc_set_passwords.py has a small default pwlen value, which makes it easier for attackers to guess passwords.
Configurations

Configuration 1 (hide)

cpe:2.3:a:canonical:cloud-init:*:*:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*

Configuration 3 (hide)

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

History

01 Jan 2022, 20:03

Type Values Removed Values Added
First Time Debian
Debian debian Linux
Opensuse
Opensuse leap
CPE cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*
CWE CWE-522 CWE-521
References (MLIST) https://lists.debian.org/debian-lts-announce/2020/02/msg00021.html - (MLIST) https://lists.debian.org/debian-lts-announce/2020/02/msg00021.html - Mailing List, Third Party Advisory
References (SUSE) http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00042.html - (SUSE) http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00042.html - Mailing List, Third Party Advisory

Information

Published : 2020-02-05 14:15

Updated : 2023-12-10 13:13


NVD link : CVE-2020-8632

Mitre link : CVE-2020-8632

CVE.ORG link : CVE-2020-8632


JSON object : View

Products Affected

debian

  • debian_linux

canonical

  • cloud-init

opensuse

  • leap
CWE
CWE-521

Weak Password Requirements