The remote Alibaba Cloud Linux 3 host has a package installed that is affected by a vulnerability as referenced in the ALINUX3-SA-2024:0257 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2021-3429:
    When instructing cloud-init to set a random password for a new user account, versions before 21.2 would     write that password to the world-readable log file /var/log/cloud-init-output.log. This could allow a     local user to log in as another user.

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RLSA-2021:3081 advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2021-2312:08 advisory.

    * cloud-init: randomly generated passwords logged in clear-text to world-readable file (CVE-2021-3429)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2021:3081 advisory.

  - cloud-init: randomly generated passwords logged in clear-text to world-readable file (CVE-2021-3429)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2021-3081 advisory.

    - Resolves: bz#1979252       (CVE-2021-3429 cloud-init: randomly generated passwords logged in clear-text to world-readable file     [rhel-8] [rhel-8.4.0.z])

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2021:3371 advisory.

    The cloud-init packages provide a set of init scripts for cloud instances. Cloud instances need special     scripts to run during initialization to retrieve and install SSH keys, and to let the user run various     scripts.

    Security Fix(es):

    * cloud-init: randomly generated passwords logged in clear-text to world-readable file (CVE-2021-3429)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
236071	Alibaba Cloud Linux 3 : 0257: cloud-init (ALINUX3-SA-2024:0257)	Nessus	Alibaba Cloud Linux Local Security Checks	2025/5/14	2025/5/14	medium
157784	Rocky Linux 8 : cloud-init (RLSA-2021:3081)	Nessus	Rocky Linux Local Security Checks	2022/2/9	2023/11/9	medium
294718	MiracleLinux 8 : cloud-init-20.3-10.el8.5 (AXSA:2021-2312:08)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	medium
152572	CentOS 8 : cloud-init (CESA-2021:3081)	Nessus	CentOS Local Security Checks	2021/8/16	2023/12/4	medium
152510	Oracle Linux 8 : cloud-init (ELSA-2021-3081)	Nessus	Oracle Linux Local Security Checks	2021/8/12	2024/11/1	medium
152933	RHEL 8 : cloud-init (RHSA-2021:3371)	Nessus	Red Hat Local Security Checks	2021/9/1	2024/11/7	medium

检测

插件搜索

medium

medium

medium

medium

medium

medium