CVE-2018-10896

CVSS 4.6 MEDIUMEPSS 0.4%CWE-321

Vexday Risk Score

13Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 4.6EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

01 Aug 2018Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

The default cloud-init configuration, in cloud-init 0.6.2 and newer, included "ssh_deletekeys: 0", disabling cloud-init's deletion of ssh host keys. In some environments, this could lead to instances created by cloning a golden master or template system, sharing ssh host keys, and being able to impersonate one another or conduct man-in-the-middle attacks.

CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Affected products

Canonical · cloud-init

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://bugs.launchpad.net/cloud-init/+bug/1781094 https://bugzilla.redhat.com/show_bug.cgi?id=1574338 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10896