{"id":"CVE-2021-3429","aliases":["ALPINE-CVE-2021-3429","BELL-CVE-2021-3429","DEBIAN-CVE-2021-3429","DLA-2601-1","EUVD-2021-26755","GHSA-jj89-4799-j2qv","MGASA-2021-0494","OESA-2021-1372","RHSA-2021:3081","RHSA-2021:3177","RHSA-2021:3371","RLSA-2021:3081","SUSE-FU-2023:3283-1","SUSE-SU-2023:2164-1","UBUNTU-CVE-2021-3429","openSUSE-SU-2024:13053-1"],"status":"published","title":"sensitive data exposure in cloud-init logs","description":"When instructing cloud-init to set a random password for a new user account, versions before 21.2 would write that password to the world-readable log file /var/log/cloud-init-output.log. This could allow a local user to log in as another user.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00219,"percentile":0.1244,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-532"],"published":"2021-03-20T00:00:00Z","modified":"2026-11-03T06:32:47Z","fixes":[{"ecosystem":"Alpine:v3.13","package":"cloud-init","fixed_in":["20.4.1-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"cloud-init","fixed_in":["21.1-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"cloud-init","fixed_in":["21.1-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"cloud-init","fixed_in":["21.1-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"cloud-init","fixed_in":["21.1-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"cloud-init","fixed_in":["21.1-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"cloud-init","fixed_in":["21.1-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"cloud-init","fixed_in":["21.1-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"cloud-init","fixed_in":["21.1-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"cloud-init","fixed_in":["21.1-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"cloud-init","fixed_in":["21.1-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"cloud-init","fixed_in":["21.1-r1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"cloud-init","fixed_in":["20.4.1-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"cloud-init","fixed_in":["20.4.1-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"cloud-init","fixed_in":["20.4.1-2"],"sources":["osv"]},{"ecosystem":"Debian:9","package":"cloud-init","fixed_in":["0.7.9-2+deb9u1"],"sources":["osv"]},{"ecosystem":"Mageia:8","package":"cloud-init","fixed_in":["20.2-2.1.mga8"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"cloud-init","fixed_in":["19.4-5.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP2","package":"cloud-init","fixed_in":["19.4-5.oe1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"cloud-init","fixed_in":["0:20.3-10.el8_4.5"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"cloud-init","fixed_in":["0:18.5-7.el8_1.6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"cloud-init","fixed_in":["0:18.5-12.el8_2.10"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"cloud-init","fixed_in":["0:20.3-10.el8_4.5"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"cloud-init","fixed_in":["21.1-19-gbad84ad4-0ubuntu1~16.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"cloud-init","fixed_in":["21.1-19-gbad84ad4-0ubuntu1~18.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"cloud-init","fixed_in":["21.1-19-gbad84ad4-0ubuntu1~20.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.13","package":"cloud-init","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20.4.1-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"cloud-init","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.1-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"cloud-init","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.1-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"cloud-init","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.1-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"cloud-init","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.1-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"cloud-init","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.1-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"cloud-init","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.1-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"cloud-init","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.1-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"cloud-init","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.1-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"cloud-init","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.1-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"cloud-init","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.1-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"cloud-init","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.1-r1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"cloud-init","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20.4.1-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"cloud-init","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20.4.1-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"cloud-init","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20.4.1-2"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"cloud-init","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.9-2+deb9u1"}]}],"versions":["0.7.9-2"]},{"source":"osv","ecosystem":"Mageia:8","package":"cloud-init","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20.2-2.1.mga8"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"cloud-init","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.4-5.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP2","package":"cloud-init","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.4-5.oe1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"cloud-init","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20.3-10.el8_4.5"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"cloud-init","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.5-7.el8_1.6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"cloud-init","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.5-12.el8_2.10"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"cloud-init","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20.3-10.el8_4.5"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP1","package":"cloud-init","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.1-150100.8.66.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP2","package":"cloud-init","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.1-150100.8.66.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP3","package":"cloud-init","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.1-150100.8.66.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP4","package":"cloud-init","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.1-150100.8.66.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP5","package":"cloud-init","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.1-150100.8.66.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"cloud-init","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.1-150100.8.66.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"cloud-init","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.1-150100.8.66.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 12","package":"cloud-init","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20.2-37.57.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"cloud-init","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.1-19-gbad84ad4-0ubuntu1~16.04.1"}]}],"versions":["0.7.7~bzr1149-0ubuntu1","0.7.7~bzr1154-0ubuntu1","0.7.7~bzr1155-0ubuntu1","0.7.7~bzr1156-0ubuntu1","0.7.7~bzr1156-0ubuntu2","0.7.7~bzr1160-0ubuntu1","0.7.7~bzr1176-0ubuntu1","0.7.7~bzr1182-0ubuntu1","0.7.7~bzr1189-0ubuntu1","0.7.7~bzr1192-0ubuntu1","0.7.7~bzr1192-0ubuntu2","0.7.7~bzr1200-0ubuntu1","0.7.7~bzr1208-0ubuntu1","0.7.7~bzr1209-0ubuntu1","0.7.7~bzr1212-0ubuntu1","0.7.7~bzr1246-0ubuntu1~16.04.1","0.7.7~bzr1256-0ubuntu1~16.04.1","0.7.8-1-g3705bb5-0ubuntu1~16.04.1","0.7.8-1-g3705bb5-0ubuntu1~16.04.3","0.7.8-49-g9e904bb-0ubuntu1~16.04.1","0.7.8-49-g9e904bb-0ubuntu1~16.04.2","0.7.8-49-g9e904bb-0ubuntu1~16.04.3","0.7.8-49-g9e904bb-0ubuntu1~16.04.4","0.7.9-0ubuntu1~16.04.2","0.7.9-48-g1c795b9-0ubuntu1~16.04.1","0.7.9-90-g61eb03fe-0ubuntu1~16.04.1","0.7.9-113-g513e99e0-0ubuntu1~16.04.1","0.7.9-153-g16a7302f-0ubuntu1~16.04.1","0.7.9-153-g16a7302f-0ubuntu1~16.04.2","0.7.9-233-ge586fe35-0ubuntu1~16.04.1","0.7.9-233-ge586fe35-0ubuntu1~16.04.2","17.1-27-geb292c18-0ubuntu1~16.04.1","17.1-46-g7acc9e68-0ubuntu1~16.04.1","17.2-35-gf576b2a2-0ubuntu1~16.04.2","18.2-4-g05926e48-0ubuntu1~16.04.1","18.2-4-g05926e48-0ubuntu1~16.04.2","18.3-9-g2e62cb8a-0ubuntu1~16.04.2","18.4-0ubuntu1~16.04.2","18.5-21-g8ee294d5-0ubuntu1~16.04.1","18.5-45-g3554ffe8-0ubuntu1~16.04.1","19.1-1-gbaa47854-0ubuntu1~16.04.1","19.2-24-ge7881d5c-0ubuntu1~16.04.1","19.2-36-g059d049c-0ubuntu1~16.04.1","19.2-36-g059d049c-0ubuntu2~16.04.1","19.3-41-gc4735dd3-0ubuntu1~16.04.1","19.4-33-gbb4131a2-0ubuntu1~16.04.1","20.2-45-g5f7825e2-0ubuntu1~16.04.1","20.3-2-g371b392c-0ubuntu1~16.04.1","20.4-0ubuntu1~16.04.1","20.4-0ubuntu1~16.04.2","20.4.1-0ubuntu1~16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"cloud-init","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.1-19-gbad84ad4-0ubuntu1~18.04.1"}]}],"versions":["17.1-18-gd4f70470-0ubuntu1","17.1-25-g17a15f9e-0ubuntu1~17.10.1","17.1-25-g17a15f9e-0ubuntu1","17.1-27-geb292c18-0ubuntu1","17.1-41-g76243487-0ubuntu1","17.1-46-g7acc9e68-0ubuntu1","17.1-51-g05b2308a-0ubuntu1","17.1-53-ga5dc0f42-0ubuntu1","17.1-58-g703241a3-0ubuntu1","17.1-60-ga30a3bb5-0ubuntu1","17.2-1-g4089e20c-0ubuntu1","17.2-9-gdf24daa8-0ubuntu1","17.2-13-g6299e8d0-0ubuntu1","17.2-20-g32a6a176-0ubuntu1","17.2-25-gc03bdd3d-0ubuntu1","17.2-30-gf7deaf15-0ubuntu1","17.2-34-g644048e3-0ubuntu1","18.1-0ubuntu1","18.1-5-g40e77380-0ubuntu1","18.1-17-g97012fbb-0ubuntu1","18.1-23-gde34dc7c-0ubuntu1","18.1-26-g685f9901-0ubuntu1","18.1-35-ge0f644b7-0ubuntu1","18.1-35-ge0f644b7-0ubuntu2","18.2-0ubuntu1","18.2-4-g05926e48-0ubuntu1","18.2-4-g05926e48-0ubuntu2","18.2-9-g49b562c9-0ubuntu1","18.2-14-g6d48d265-0ubuntu1","18.2-27-g6ef92c98-0ubuntu1~18.04.1","18.3-9-g2e62cb8a-0ubuntu1~18.04.2","18.4-0ubuntu1~18.04.1","18.5-21-g8ee294d5-0ubuntu1~18.04.1","18.5-45-g3554ffe8-0ubuntu1~18.04.1","19.1-1-gbaa47854-0ubuntu1~18.04.1","19.2-24-ge7881d5c-0ubuntu1~18.04.1","19.2-36-g059d049c-0ubuntu1~18.04.1","19.2-36-g059d049c-0ubuntu2~18.04.1","19.3-41-gc4735dd3-0ubuntu1~18.04.1","19.4-33-gbb4131a2-0ubuntu1~18.04.1","20.2-45-g5f7825e2-0ubuntu1~18.04.1","20.3-2-g371b392c-0ubuntu1~18.04.1","20.4-0ubuntu1~18.04.1","20.4-0ubuntu1~18.04.2","20.4.1-0ubuntu1~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"cloud-init","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.1-19-gbad84ad4-0ubuntu1~20.04.1"}]}],"versions":["19.2-36-g059d049c-0ubuntu3","19.2-78-ge8138959-0ubuntu1","19.3-0ubuntu1","19.3-23-gfb04493e-0ubuntu1","19.3-30-g4bc399e0-0ubuntu1","19.3-40-gf69d33a7-0ubuntu1","19.3-41-gc4735dd3-0ubuntu1","19.3-74-g129b1c4e-0ubuntu1","19.4-1-g8c96cbc1-0ubuntu1","19.4-16-gf8950d63-0ubuntu1","19.4-31-g3f6192b3-0ubuntu1","19.4-33-gbb4131a2-0ubuntu1","19.4-56-g06e324ff-0ubuntu1","20.1-0ubuntu1","20.1-5-g67c8e53c-0ubuntu1","20.1-9-g1f860e5a-0ubuntu1","20.1-10-g71af48df-0ubuntu1","20.1-10-g71af48df-0ubuntu2","20.1-10-g71af48df-0ubuntu3","20.1-10-g71af48df-0ubuntu5","20.2-45-g5f7825e2-0ubuntu1~20.04.1","20.3-2-g371b392c-0ubuntu1~20.04.1","20.4-0ubuntu1~20.04.1","20.4-0ubuntu1~20.04.2","20.4.1-0ubuntu1~20.04.1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"cloud-init","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.1-2.1"}]}],"bundled":2}],"products":[{"vendor":"canonical","product":"cloud-init"},{"vendor":"canonical ltd.","product":"cloud-init"}],"references":[{"url":"https://github.com/canonical/cloud-init/commit/b794d426b9ab43ea9d6371477466070d86e10668","tags":["patch","x_transferred","Patch","fix"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3429","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-jj89-4799-j2qv"},{"url":"https://security.alpinelinux.org/vuln/CVE-2021-3429","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2021-3429","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-3429","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2021-0494.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=28991","tags":["report"]},{"url":"https://www.debian.org/lts/security/2021/dla-2601","tags":["web"]},{"url":"https://github.com/canonical/cloud-init/releases/tag/21.2","tags":["web"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1372","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:3081","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1940967","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_3081.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3429","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3429","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2021:3177","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_3177.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:3371","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_3371.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2021:3081","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/-2023-3283/suse-fu-20233283-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1184758","tags":["report"]},{"url":"https://bugzilla.suse.com/1210273","tags":["report"]},{"url":"https://bugzilla.suse.com/1212879","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3429","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-1786","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20232164-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1181283","tags":["report"]},{"url":"https://bugzilla.suse.com/1183939","tags":["report"]},{"url":"https://bugzilla.suse.com/1184085","tags":["report"]},{"url":"https://bugzilla.suse.com/1210277","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-3429","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2021-3429","title":"sensitive data exposure in cloud-init logs","description":"When instructing cloud-init to set a random password for a new user account, versions before 21.2 would write that password to the world-readable log file /var/log/cloud-init-output.log. This could allow a local user to log in as another user.","status":"published","published":"2023-04-19T21:42:02.402Z","modified":"2025-02-05T14:44:18.828Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"cna"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-532","CWE-532"],"updated_at":"2026-11-02T14:33:04.020035Z"}],"euvd":[{"id":"EUVD-2021-26755","description":"When instructing cloud-init to set a random password for a new user account, versions before 21.2 would write that password to the world-readable log file /var/log/cloud-init-output.log. This could allow a local user to log in as another user.","status":"published","published":"2023-04-19T21:42:02Z","modified":"2025-02-05T14:44:18Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-03T00:04:05.565654Z"}],"ghsa":[{"id":"GHSA-jj89-4799-j2qv","title":"When instructing cloud-init to set a random password for a new user account, versions before 21.2...","description":"When instructing cloud-init to set a random password for a new user account, versions before 21.2 would write that password to the world-readable log file /var/log/cloud-init-output.log. This could allow a local user to log in as another user.","status":"published","published":"2023-04-20T00:30:43Z","modified":"2024-04-04T03:36:29Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-532"],"updated_at":"2026-11-02T14:56:16.439649Z"}],"nvd":[{"id":"CVE-2021-3429","description":"When instructing cloud-init to set a random password for a new user account, versions before 21.2 would write that password to the world-readable log file /var/log/cloud-init-output.log. This could allow a local user to log in as another user.","status":"published","published":"2023-04-19T22:15:10.137Z","modified":"2026-06-17T04:05:04.447Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-532"],"updated_at":"2026-11-02T14:07:07.764332Z"}],"osv":[{"id":"ALPINE-CVE-2021-3429","description":"When instructing cloud-init to set a random password for a new user account, versions before 21.2 would write that password to the world-readable log file /var/log/cloud-init-output.log. This could allow a local user to log in as another user.","status":"published","published":"2023-04-19T22:15:10.137Z","modified":"2026-11-03T06:32:47.47243053Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-03T07:16:46.202932Z"},{"id":"BELL-CVE-2021-3429","title":"CVE-2021-3429 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:16:27.758716Z","modified":"2026-01-26T09:49:03.396886Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:28:16.5265Z"},{"id":"CVE-2021-3429","description":"When instructing cloud-init to set a random password for a new user account, versions before 21.2 would write that password to the world-readable log file /var/log/cloud-init-output.log. This could allow a local user to log in as another user.","status":"published","published":"2023-04-19T22:15:10.137Z","modified":"2026-10-20T10:53:48.654266763Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:20.13324Z"},{"id":"DEBIAN-CVE-2021-3429","description":"When instructing cloud-init to set a random password for a new user account, versions before 21.2 would write that password to the world-readable log file /var/log/cloud-init-output.log. This could allow a local user to log in as another user.","status":"published","published":"2023-04-19T22:15:10.137Z","modified":"2026-10-23T18:03:49.534830662Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:35.233346Z"},{"id":"OESA-2021-1372","title":"cloud-init security update","description":"Cloud-init is the defacto multi-distribution package that handles early initialization of a cloud instance.\r\n\r\nSecurity Fix(es):\r\n\r\n(CVE-2021-3429)","status":"published","published":"2021-09-30T11:04:38Z","modified":"2026-08-18T01:16:03.242806831Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:38.987987Z"},{"id":"RHSA-2021:3081","title":"Red Hat Security Advisory: cloud-init security update","status":"published","published":"2024-09-16T06:11:07Z","modified":"2025-11-22T12:23:26Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"RHSA-2021:3177","title":"Red Hat Security Advisory: cloud-init security update","status":"published","published":"2024-09-16T06:11:13Z","modified":"2025-11-22T12:23:40Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"RHSA-2021:3371","title":"Red Hat Security Advisory: cloud-init security update","status":"published","published":"2024-09-16T06:11:21Z","modified":"2025-11-22T12:24:10Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"RLSA-2021:3081","title":"Moderate: cloud-init security update","description":"The cloud-init packages provide a set of init scripts for cloud instances. Cloud instances need special scripts to run during initialization to retrieve and install SSH keys, and to let the user run various scripts.\n\nSecurity Fix(es):\n\n* cloud-init: randomly generated passwords logged in clear-text to world-readable file (CVE-2021-3429)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2021-08-10T12:01:15Z","modified":"2026-02-05T07:00:10.853466Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:23.969672Z"},{"id":"UBUNTU-CVE-2021-3429","description":"When instructing cloud-init to set a random password for a new user account, versions before 21.2 would write that password to the world-readable log file /var/log/cloud-init-output.log. This could allow a local user to log in as another user.","status":"published","published":"2023-04-19T22:15:00Z","modified":"2025-07-16T07:19:52.491898Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:54:27.870979Z"},{"id":"DLA-2601-1","title":"cloud-init - security update","status":"published","published":"2021-03-20T00:00:00Z","modified":"2026-03-09T01:18:20.746542Z","updated_at":"2026-11-02T15:46:10.712745Z"},{"id":"MGASA-2021-0494","title":"Updated cloud-init packages fix security vulnerability","description":"cloud-init has the ability to generate and set a randomized password for\nsystem users. This functionality is enabled at runtime by passing\ncloud-config data such as: 'chpasswd: list: | user1:RANDOM'\n\nWhen instructing cloud-init to set a random password for a new user\naccount, versions before 21.1.19 would write that password to the\nworld-readable log file /var/log/cloud-init-output.log. This could allow a\nlocal user to log in as another user (CVE-2021-3429).\n","status":"published","published":"2021-10-29T19:32:22Z","modified":"2026-04-16T04:44:16.6465368Z","updated_at":"2026-11-02T15:49:41.849028Z"},{"id":"openSUSE-SU-2024:13053-1","title":"cloud-init-23.1-2.1 on GA media","description":"These are all security issues fixed in the cloud-init-23.1-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:42:28.841191Z","updated_at":"2026-11-02T16:58:36.025801Z"},{"id":"SUSE-FU-2023:3283-1","title":"Feature update for cloud-init","description":"This update for cloud-init fixes the following issues:\n\n- Default route is not configured (bsc#1212879)\n- cloud-final service failing in powerVS (bsc#1210273)\n- Randomly generated passwords logged in clear-text to world-readable file (bsc#1184758, CVE-2021-3429)\n","status":"published","published":"2023-08-11T08:29:06Z","modified":"2026-02-04T02:35:19.579312Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2023:2164-1","title":"Security update for cloud-init","description":"This update for cloud-init contains following fixes:\n\n - CVE-2021-3429: Do not write the generated password to the log file. (bsc#1184758)\n - CVE-2023-1786: Do not expose sensitive data gathered from the CSP. (bsc#1210277)\n\nOther fixes:\n - Change log file creation mode to 640. (bsc#1183939)\n - Write proper bonding option configuration for SLE/openSUSE. (bsc#1184085)\n - Do not including sudoers.d directory twice. (bsc#1181283)\n","status":"published","published":"2023-05-10T17:55:46Z","modified":"2026-02-04T02:19:25.403012Z","updated_at":"2026-11-02T15:53:52.350754Z"}]}}