CVE-2023-5182

—

CVSS 3.1

5.5 medium

EPSS

<1%p11

Published

Oct 7, 2023 (Oct 7, 2023)

Modified

Jun 17, 2026

Description

Sensitive data could be exposed in logs of subiquity version 23.09.1 and earlier. An attacker in the adm group could use this information to find hashed passwords and possibly escalate their privilege.

Vendors: canonical
Products: subiquity
Weakness: CWE-532
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.