CVE-2020-8632 vulnerability in Canonical and Other Products
Published on February 5, 2020
In cloud-init through 19.4, rand_user_password in cloudinit/config/cc_set_passwords.py has a small default pwlen value, which makes it easier for attackers to guess passwords.
Products Associated with CVE-2020-8632
You can be notified by email with stack.watch whenever vulnerabilities like CVE-2020-8632 are published in these products:
Exploit Probability
EPSS
0.10%
Percentile
26.69%
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.