CVE-2023-5182

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

Sensitive data could be exposed in logs of subiquity version 23.09.1 and earlier. An attacker in the adm group could use this information to find hashed passwords and possibly escalate their privilege.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-532

Affected software

No affected versions have been published.

Timeline

Published: Oct 7, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-518206.8An issue in Blurams Lumi Security Camera (A31C) v.2.3.38.12558 allows a physically proximate attackers to execute arbitrary code.CVE-2023-518289.8A SQL Injection vulnerability in /admin/convert/export.class.php in PMB 7.4.7 and earlier versions allows remote unauthenticated attackers t CVE-2023-51838.8Unsafe deserialization of untrusted JSON allows execution of arbitrary code on affected releases of the Illumio PCE. Authentication to the A CVE-2023-518338.1A command injection issue in TRENDnet TEW-411BRPplus v.2.07_eu that allows a local attacker to execute arbitrary code via the data1 paramete CVE-2023-518356.8An issue in TRENDnet TEW-822DRE v.1.03B02 allows a local attacker to execute arbitrary code via the parameters ipv4_ping in the /boafrm/form CVE-2023-518379.8Ylianst MeshCentral 1.1.16 is vulnerable to Missing SSL Certificate Validation.CVE-2023-518387.5Ylianst MeshCentral 1.1.16 suffers from Use of a Broken or Risky Cryptographic Algorithm.CVE-2023-518399.1DeviceFarmer stf v3.6.6 suffers from Use of a Broken or Risky Cryptographic Algorithm.CVE-2023-51848.8Two potential signed to unsigned conversion errors and buffer overflow vulnerabilities at the following locations in the Zephyr IPM drivers.CVE-2023-518409.8DoraCMS 2.1.8 is vulnerable to Use of Hard-coded Cryptographic Key.CVE-2023-518427.5An algorithm-downgrade issue was discovered in Ylianst MeshCentral 1.1.16.CVE-2023-518438.2react-dashboard 1.4.0 is vulnerable to Cross Site Scripting (XSS) as httpOnly is not set.