Ubuntu Ubuntu-Desktop-Provision Sensitive Credential Leak Vulnerability
Vulnerability
A vulnerability in Ubuntu's ubuntu-desktop-provision package, specifically version 24.04.4, could lead to the unintentional disclosure of sensitive user credentials during crash reporting. If an installation fails and the user submits a bug report to Launchpad, the logs attached to the report may include the user's password hash.
Impact
Exploitation of this vulnerability could result in the unauthorized disclosure of password hashes, potentially allowing for password cracking and unauthorized access to user accounts.
Remediation
Users can update to the latest version of ubuntu-desktop-provision to address this vulnerability.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.