The default cloud-init configuration, in cloud-init 0.6.2 and newer, included "ssh_deletekeys: 0", disabling cloud-init's deletion of ssh host keys. In some environments, this could lead to instances created by cloning a golden master or template system, sharing ssh host keys, and being able to impersonate one another or conduct man-in-the-middle attacks.

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2020-3898 advisory.

  - cloud-init through 19.4 relies on Mersenne Twister for a random password, which makes it easier for     attackers to predict passwords, because rand_str in cloudinit/util.py calls the random.choice function.
    (CVE-2020-8631)

  - The default cloud-init configuration, in cloud-init 0.6.2 and newer, included ssh_deletekeys: 0,     disabling cloud-init's deletion of ssh host keys. In some environments, this could lead to instances     created by cloning a golden master or template system, sharing ssh host keys, and being able to     impersonate one another or conduct man-in-the-middle attacks. (CVE-2018-10896)

  - In cloud-init through 19.4, rand_user_password in cloudinit/config/cc_set_passwords.py has a small default     pwlen value, which makes it easier for attackers to guess passwords. (CVE-2020-8632)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the cloud-init package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - The default cloud-init configuration, in cloud-init 0.6.2 and newer, included 'ssh_deletekeys: 0',     disabling cloud-init's deletion of ssh host keys. In some environments, this could lead to instances     created by cloning a golden master or template system, sharing ssh host keys, and being able to     impersonate one another or conduct man-in-the-middle attacks. (CVE-2018-10896)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the cloud-init package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - The default cloud-init configuration, in cloud-init 0.6.2 and newer, included 'ssh_deletekeys: 0',     disabling cloud-init's deletion of ssh host keys. In some environments, this could lead to instances     created by cloning a golden master or template system, sharing ssh host keys, and being able to     impersonate one another or conduct man-in-the-middle attacks. (CVE-2018-10896)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has cloud-init packages installed that are affected by multiple vulnerabilities:

  - The default cloud-init configuration, in cloud-init 0.6.2 and newer, included ssh_deletekeys: 0,     disabling cloud-init's deletion of ssh host keys. In some environments, this could lead to instances     created by cloning a golden master or template system, sharing ssh host keys, and being able to     impersonate one another or conduct man-in-the-middle attacks. (CVE-2018-10896)

  - A security feature bypass exists in Azure SSH Keypairs, due to a change in the provisioning logic for some     Linux images that use cloud-init, aka 'Azure SSH Keypairs Security Feature Bypass Vulnerability'.
    (CVE-2019-0816)

  - cloud-init through 19.4 relies on Mersenne Twister for a random password, which makes it easier for     attackers to predict passwords, because rand_str in cloudinit/util.py calls the random.choice function.
    (CVE-2020-8631)

  - In cloud-init through 19.4, rand_user_password in cloudinit/config/cc_set_passwords.py has a small default     pwlen value, which makes it easier for attackers to guess passwords. (CVE-2020-8632)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has cloud-init packages installed that are affected by multiple vulnerabilities:

  - The default cloud-init configuration, in cloud-init 0.6.2 and newer, included ssh_deletekeys: 0,     disabling cloud-init's deletion of ssh host keys. In some environments, this could lead to instances     created by cloning a golden master or template system, sharing ssh host keys, and being able to     impersonate one another or conduct man-in-the-middle attacks. (CVE-2018-10896)

  - In cloud-init through 19.4, rand_user_password in cloudinit/config/cc_set_passwords.py has a small default     pwlen value, which makes it easier for attackers to guess passwords. (CVE-2020-8632)

  - cloud-init through 19.4 relies on Mersenne Twister for a random password, which makes it easier for     attackers to predict passwords, because rand_str in cloudinit/util.py calls the random.choice function.
    (CVE-2020-8631)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 6.02, has cloud-init packages installed that are affected by a vulnerability:

  - The default cloud-init configuration, in cloud-init 0.6.2 and newer, included ssh_deletekeys: 0,     disabling cloud-init's deletion of ssh host keys. In some environments, this could lead to instances     created by cloning a golden master or template system, sharing ssh host keys, and being able to     impersonate one another or conduct man-in-the-middle attacks. (CVE-2018-10896)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2020:3050 advisory.

  - cloud-init: default configuration disabled deletion of SSH host keys (CVE-2018-10896)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of tested product installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2021-1576 advisory.

  - The default cloud-init configuration, in cloud-init 0.6.2 and newer, included ssh_deletekeys: 0,     disabling cloud-init's deletion of ssh host keys. In some environments, this could lead to instances     created by cloning a golden master or template system, sharing ssh host keys, and being able to     impersonate one another or conduct man-in-the-middle attacks. (CVE-2018-10896)

  - cloud-init through 19.4 relies on Mersenne Twister for a random password, which makes it easier for     attackers to predict passwords, because rand_str in cloudinit/util.py calls the random.choice function.
    (CVE-2020-8631)

  - In cloud-init through 19.4, rand_user_password in cloudinit/config/cc_set_passwords.py has a small default     pwlen value, which makes it easier for attackers to guess passwords. (CVE-2020-8632)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the version of the cloud-init package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - The default cloud-init configuration, in cloud-init     0.6.2 and newer, included 'ssh_deletekeys: 0',     disabling cloud-init's deletion of ssh host keys. In     some environments, this could lead to instances created     by cloning a golden master or template system, sharing     ssh host keys, and being able to impersonate one     another or conduct man-in-the-middle     attacks.(CVE-2018-10896)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security Fix(es) :

  - cloud-init: Use of random.choice when generating random     password (CVE-2020-8631)

  - cloud-init: Too short random password length in     cc_set_password in config/cc_set_passwords.py     (CVE-2020-8632)

  - cloud-init: default configuration disabled deletion of     SSH host keys (CVE-2018-10896)

The remote CentOS Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2020:3898 advisory.

  - cloud-init: default configuration disabled deletion of SSH host keys (CVE-2018-10896)

  - cloud-init: Use of random.choice when generating random password (CVE-2020-8631)

  - cloud-init: Too short random password length in cc_set_password in config/cc_set_passwords.py     (CVE-2020-8632)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:3898 advisory.

  - cloud-init: default configuration disabled deletion of SSH host keys (CVE-2018-10896)

  - cloud-init: Use of random.choice when generating random password (CVE-2020-8631)

  - cloud-init: Too short random password length in cc_set_password in config/cc_set_passwords.py     (CVE-2020-8632)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the version of the cloud-init package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability :

  - The default cloud-init configuration, in cloud-init     0.6.2 and newer, included 'ssh_deletekeys: 0',     disabling cloud-init's deletion of ssh host keys. In     some environments, this could lead to instances created     by cloning a golden master or template system, sharing     ssh host keys, and being able to impersonate one     another or conduct man-in-the-middle     attacks.(CVE-2018-10896)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2020:3644 advisory.

  - cloud-init: default configuration disabled deletion of SSH host keys (CVE-2018-10896)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2020:3050 advisory.

  - cloud-init: default configuration disabled deletion of SSH host keys (CVE-2018-10896)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
180994	Oracle Linux 7 : cloud-init (ELSA-2020-3898)	Nessus	Oracle Linux Local Security Checks	high
169607	EulerOS Virtualization 3.0.2.6 : cloud-init (EulerOS-SA-2023-1085)	Nessus	Huawei Local Security Checks	high
165898	EulerOS Virtualization 3.0.6.6 : cloud-init (EulerOS-SA-2022-2490)	Nessus	Huawei Local Security Checks	high
164599	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-5.15.5)	Nessus	Misc.	critical
164584	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-5.19.1)	Nessus	Misc.	critical
164556	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-5.19.0.5)	Nessus	Misc.	critical
161585	EulerOS 2.0 SP3 : cloud-init (EulerOS-SA-2022-1709)	Nessus	Huawei Local Security Checks	high
160701	EulerOS Virtualization 3.0.2.0 : cloud-init (EulerOS-SA-2022-1682)	Nessus	Huawei Local Security Checks	high
159082	EulerOS 2.0 SP5 : cloud-init (EulerOS-SA-2022-1318)	Nessus	Huawei Local Security Checks	high
154516	NewStart CGSL CORE 5.05 / MAIN 5.05 : cloud-init Multiple Vulnerabilities (NS-SA-2021-0151)	Nessus	NewStart CGSL Local Security Checks	high
147387	NewStart CGSL CORE 5.04 / MAIN 5.04 : cloud-init Multiple Vulnerabilities (NS-SA-2021-0016)	Nessus	NewStart CGSL Local Security Checks	high
147346	NewStart CGSL MAIN 6.02 : cloud-init Vulnerability (NS-SA-2021-0051)	Nessus	NewStart CGSL Local Security Checks	high
145805	CentOS 8 : cloud-init (CESA-2020:3050)	Nessus	CentOS Local Security Checks	high
144795	Amazon Linux 2 : cloud-init (ALAS-2021-1576)	Nessus	Amazon Linux Local Security Checks	high
142329	EulerOS 2.0 SP9 : cloud-init (EulerOS-SA-2020-2408)	Nessus	Huawei Local Security Checks	high
142321	EulerOS 2.0 SP9 : cloud-init (EulerOS-SA-2020-2426)	Nessus	Huawei Local Security Checks	high
141687	Scientific Linux Security Update : cloud-init on SL7.x x86_64 (20201001)	Nessus	Scientific Linux Local Security Checks	high
141635	CentOS 7 : cloud-init (CESA-2020:3898)	Nessus	CentOS Local Security Checks	high
141025	RHEL 7 : cloud-init (RHSA-2020:3898)	Nessus	Red Hat Local Security Checks	high
140989	EulerOS Virtualization for ARM 64 3.0.6.0 : cloud-init (EulerOS-SA-2020-2041)	Nessus	Huawei Local Security Checks	high
140399	RHEL 8 : cloud-init (RHSA-2020:3644)	Nessus	Red Hat Local Security Checks	high
139943	EulerOS 2.0 SP8 : cloud-init (EulerOS-SA-2020-1840)	Nessus	Huawei Local Security Checks	high
138810	RHEL 8 : cloud-init (RHSA-2020:3050)	Nessus	Red Hat Local Security Checks	high

Detections

Analytics

CVE-2018-10896

high

Tenable Plugins

high

high

high

critical

critical

critical

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high