Sensitive Data Exposure Vulnerability in Subiquity by Canonical

CVE-2023-5182

What is CVE-2023-5182?

In Subiquity versions 23.09.1 and earlier, sensitive data may be inadvertently logged, exposing potential security risks. Attackers within the administrative group can exploit this flaw to access hashed passwords and potentially escalate their privileges within the system. This could lead to unauthorized access and control over sensitive resources, impacting overall system security.

References