Revision Date: | 2022-09-02 | Version: | 1 |
Title: | CVE-2020-8632 |
Description: |
In cloud-init through 19.4, rand_user_password in cloudinit/config/cc_set_passwords.py has a small default pwlen value, which makes it easier for attackers to guess passwords.
|
Family: | unix | Class: | vulnerability |
Status: | | Reference(s): | CVE-2020-8632 SUSE-SU-2020:0585-1 SUSE-SU-2020:0751-1 SUSE-SU-2020:0818-1 openSUSE-SU-2020:0400-1 Mitre CVE-2020-8632 SUSE CVE-2020-8632 SUSE-IU-2021:6-1 SUSE-IU-2021:605-1 SUSE-SU-2020:0585-1 SUSE-SU-2020:0751-1 SUSE-SU-2020:0818-1 openSUSE-SU-2020:0400-1
|
Platform(s): | Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server Image SLES15-SP2-Manager-4-1-Proxy-BYOS-Azure Image SLES15-SP2-Manager-4-1-Proxy-BYOS-EC2-HVM Image SLES15-SP2-Manager-4-1-Server-BYOS-Azure Image SLES15-SP2-Manager-4-1-Server-BYOS-EC2-HVM Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM Image SLES15-SP4-Manager-Proxy-4-3-BYOS Image SLES15-SP4-Manager-Proxy-4-3-BYOS-Azure Image SLES15-SP4-Manager-Proxy-4-3-BYOS-EC2 Image SLES15-SP4-Manager-Server-4-3-BYOS Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2 openSUSE Leap 15.1 openSUSE Tumbleweed SUSE Linux Enterprise High Performance Computing 15 SUSE Linux Enterprise High Performance Computing 15 SP1 SUSE Linux Enterprise High Performance Computing 15 SP2 SUSE Linux Enterprise High Performance Computing 15 SP3 SUSE Linux Enterprise High Performance Computing 15 SP4 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Module for Public Cloud 15 SUSE Linux Enterprise Module for Public Cloud 15 SP1 SUSE Linux Enterprise Module for Public Cloud 15 SP2 SUSE Linux Enterprise Module for Public Cloud 15 SP3 SUSE Linux Enterprise Module for Public Cloud 15 SP4 SUSE Linux Enterprise Server 11 SP3-TERADATA SUSE Linux Enterprise Server 15 SUSE Linux Enterprise Server 15 SP1 SUSE Linux Enterprise Server 15 SP2 SUSE Linux Enterprise Server 15 SP3 SUSE Linux Enterprise Server 15 SP4 SUSE Linux Enterprise Server for SAP Applications 11 SP3-TERADATA SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SP3 SUSE Linux Enterprise Server for SAP Applications 15 SP4 SUSE Linux Enterprise Storage 6 SUSE Linux Enterprise Storage 7 SUSE Linux Enterprise Storage 7.1 SUSE Manager Proxy 4.0 SUSE Manager Proxy 4.1 SUSE Manager Proxy 4.2 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.0 SUSE Manager Retail Branch Server 4.1 SUSE Manager Retail Branch Server 4.2 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.0 SUSE Manager Server 4.1 SUSE Manager Server 4.2 SUSE Manager Server 4.3
| Product(s): | |
Definition Synopsis |
Release Information SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 is installed
AND
cloud-init-19.4-5.24 is installed
OR cloud-init-doc-19.4-5.24 is installed
OR Package Information
SUSE Linux Enterprise Module for Public Cloud 15 is installed
AND
cloud-init-19.4-5.24 is installed
OR cloud-init-config-suse-19.4-5.24 is installed
|
Definition Synopsis |
Release Information
SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 is installed
AND
cloud-init-19.4-5.24 is installed
OR cloud-init-doc-19.4-5.24 is installed
OR Package Information
SUSE Linux Enterprise Module for Public Cloud 15 is installed
AND
cloud-init-19.4-5.24 is installed
OR cloud-init-config-suse-19.4-5.24 is installed
OR Package Information
SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1 is installed
AND
cloud-init-19.4-8.17 is installed
OR cloud-init-doc-19.4-8.17 is installed
OR Package Information
SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed
AND
cloud-init-19.4-8.17 is installed
OR cloud-init-config-suse-19.4-8.17 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Module for Public Cloud 12 is installed
AND Package Information
cloud-init-19.4-37.39 is installed
OR cloud-init-config-suse-19.4-37.39 is installed
|
Definition Synopsis |
openSUSE Leap 15.1 is installed
AND Package Information
cloud-init-19.4-lp151.2.15 is installed
AND cloud-init is signed with openSUSE key
OR
cloud-init-config-suse-19.4-lp151.2.15 is installed
AND cloud-init-config-suse is signed with openSUSE key
OR
cloud-init-doc-19.4-lp151.2.15 is installed
AND cloud-init-doc is signed with openSUSE key
|
Definition Synopsis |
Release Information
SUSE Linux Enterprise Server 11 SP3-TERADATA is installed
OR SUSE Linux Enterprise Server for SAP Applications 11 SP3-TERADATA is installed
AND Package Information
cloud-init-19.4-3.8 is installed
OR cloud-init-config-suse-19.4-3.8 is installed
OR cloud-init-doc-19.4-3.8 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Module for Public Cloud 15 SP2 is installed
AND Package Information
cloud-init-19.4-8.20 is installed
OR cloud-init-config-suse-19.4-8.20 is installed
|
Definition Synopsis |
Release Information
SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1 is installed
AND
cloud-init-19.4-8.17 is installed
OR cloud-init-doc-19.4-8.17 is installed
OR Package Information
SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed
AND
cloud-init-19.4-8.17 is installed
OR cloud-init-config-suse-19.4-8.17 is installed
|
Definition Synopsis |
Release Information
SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 is installed
AND
cloud-init-19.4-5.24 is installed
OR cloud-init-doc-19.4-5.24 is installed
OR Package Information
SUSE Linux Enterprise Module for Public Cloud 15 is installed
AND
cloud-init-19.4-5.24 is installed
OR cloud-init-config-suse-19.4-5.24 is installed
OR Package Information
SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1 is installed
AND
cloud-init-19.4-8.17 is installed
OR cloud-init-doc-19.4-8.17 is installed
OR Package Information
SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed
AND
cloud-init-19.4-8.17 is installed
OR cloud-init-config-suse-19.4-8.17 is installed
OR Package Information
SUSE Linux Enterprise Module for Public Cloud 15 SP2 is installed
AND
cloud-init-19.4-8.20 is installed
OR cloud-init-config-suse-19.4-8.20 is installed
|
Definition Synopsis |
openSUSE Tumbleweed is installed
AND Package Information
cloud-init-21.2-1.2 is installed
OR cloud-init-config-suse-21.2-1.2 is installed
OR cloud-init-doc-21.2-1.2 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed
AND Package Information
cloud-init-19.4-8.17.1 is installed
OR cloud-init-config-suse-19.4-8.17.1 is installed
|
Definition Synopsis |
Release Information
SUSE Linux Enterprise Module for Public Cloud 15 SP2 is installed
AND
cloud-init-19.4-8.20.1 is installed
OR cloud-init-config-suse-19.4-8.20.1 is installed
OR Package Information
SUSE Linux Enterprise Module for Public Cloud 15 is installed
AND
cloud-init-19.4-5.24.1 is installed
OR cloud-init-config-suse-19.4-5.24.1 is installed
OR Package Information
SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed
AND
cloud-init-19.4-8.17.1 is installed
OR cloud-init-config-suse-19.4-8.17.1 is installed
OR Package Information
SUSE Linux Enterprise Module for Public Cloud 15 SP3 is installed
AND
cloud-init-20.2-8.45.1 is installed
OR cloud-init-config-suse-20.2-8.45.1 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Server 11 SP3-TERADATA is installed
AND Package Information
cloud-init-19.4-3.8.2 is installed
OR cloud-init-config-suse-19.4-3.8.2 is installed
OR cloud-init-doc-19.4-3.8.2 is installed
|
Definition Synopsis |
Release Information
SUSE Linux Enterprise High Performance Computing 15 SP3 is installed
OR SUSE Linux Enterprise Module for Public Cloud 15 SP3 is installed
OR SUSE Linux Enterprise Server 15 SP3 is installed
OR SUSE Linux Enterprise Server for SAP Applications 15 SP3 is installed
OR SUSE Linux Enterprise Storage 7.1 is installed
OR SUSE Manager Proxy 4.2 is installed
OR SUSE Manager Retail Branch Server 4.2 is installed
OR SUSE Manager Server 4.2 is installed
AND
cloud-init-20.2-8.45.1 is installed
OR cloud-init-config-suse-20.2-8.45.1 is installed
OR Package Information
Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure is installed
OR Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM is installed
OR Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure is installed
OR Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM is installed
AND
cloud-init-19.4-8.17.1 is installed
OR cloud-init-config-suse-19.4-8.17.1 is installed
|
Definition Synopsis |
Release Information
SUSE Linux Enterprise High Performance Computing 15 SP1 is installed
OR SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed
OR SUSE Linux Enterprise Server 15 SP1 is installed
OR SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed
OR SUSE Linux Enterprise Storage 6 is installed
OR SUSE Manager Proxy 4.0 is installed
OR SUSE Manager Retail Branch Server 4.0 is installed
OR SUSE Manager Server 4.0 is installed
AND Package Information
cloud-init-19.4-8.17.1 is installed
OR cloud-init-config-suse-19.4-8.17.1 is installed
|
Definition Synopsis |
Release Information
SUSE Linux Enterprise High Performance Computing 15 SP1 is installed
OR SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed
OR SUSE Linux Enterprise Server 15 SP1 is installed
OR SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed
OR SUSE Linux Enterprise Storage 6 is installed
OR SUSE Manager Proxy 4.0 is installed
OR SUSE Manager Retail Branch Server 4.0 is installed
OR SUSE Manager Server 4.0 is installed
AND
cloud-init-19.4-8.17.1 is installed
OR cloud-init-config-suse-19.4-8.17.1 is installed
OR Package Information
Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy is installed
OR Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server is installed
OR Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy is installed
OR Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server is installed
AND
cloud-init-19.4-8.17.1 is installed
OR cloud-init-config-suse-19.4-8.17.1 is installed
|
Definition Synopsis |
Release Information
SUSE Linux Enterprise High Performance Computing 15 SP2 is installed
OR SUSE Linux Enterprise Module for Public Cloud 15 SP2 is installed
OR SUSE Linux Enterprise Server 15 SP2 is installed
OR SUSE Linux Enterprise Server for SAP Applications 15 SP2 is installed
OR SUSE Linux Enterprise Storage 7 is installed
OR SUSE Manager Proxy 4.1 is installed
OR SUSE Manager Retail Branch Server 4.1 is installed
OR SUSE Manager Server 4.1 is installed
AND
cloud-init-19.4-8.20.1 is installed
OR cloud-init-config-suse-19.4-8.20.1 is installed
OR Package Information
Image SLES15-SP2-Manager-4-1-Proxy-BYOS-Azure is installed
OR Image SLES15-SP2-Manager-4-1-Proxy-BYOS-EC2-HVM is installed
OR Image SLES15-SP2-Manager-4-1-Server-BYOS-Azure is installed
OR Image SLES15-SP2-Manager-4-1-Server-BYOS-EC2-HVM is installed
AND
cloud-init-19.4-8.17.1 is installed
OR cloud-init-config-suse-19.4-8.17.1 is installed
|
Definition Synopsis |
Release Information
SUSE Linux Enterprise High Performance Computing 15 SP2 is installed
OR SUSE Linux Enterprise Module for Public Cloud 15 SP2 is installed
OR SUSE Linux Enterprise Server 15 SP2 is installed
OR SUSE Linux Enterprise Server for SAP Applications 15 SP2 is installed
OR SUSE Linux Enterprise Storage 7 is installed
OR SUSE Manager Proxy 4.1 is installed
OR SUSE Manager Retail Branch Server 4.1 is installed
OR SUSE Manager Server 4.1 is installed
AND
cloud-init-19.4-8.20.1 is installed
OR cloud-init-config-suse-19.4-8.20.1 is installed
OR Package Information
SUSE Linux Enterprise High Performance Computing 15 SP3 is installed
OR SUSE Linux Enterprise Module for Public Cloud 15 SP3 is installed
OR SUSE Linux Enterprise Server 15 SP3 is installed
OR SUSE Linux Enterprise Server for SAP Applications 15 SP3 is installed
OR SUSE Linux Enterprise Storage 7.1 is installed
OR SUSE Manager Proxy 4.2 is installed
OR SUSE Manager Retail Branch Server 4.2 is installed
OR SUSE Manager Server 4.2 is installed
AND
cloud-init-20.2-8.45.1 is installed
OR cloud-init-config-suse-20.2-8.45.1 is installed
|
Definition Synopsis |
Release Information
SUSE Linux Enterprise High Performance Computing 15 SP4 is installed
OR SUSE Linux Enterprise Module for Public Cloud 15 SP4 is installed
OR SUSE Linux Enterprise Server 15 SP4 is installed
OR SUSE Linux Enterprise Server for SAP Applications 15 SP4 is installed
OR SUSE Manager Proxy 4.3 is installed
OR SUSE Manager Retail Branch Server 4.3 is installed
OR SUSE Manager Server 4.3 is installed
AND Package Information
cloud-init-21.4-150100.8.58.1 is installed
OR cloud-init-config-suse-21.4-150100.8.58.1 is installed
|
Definition Synopsis |
Release Information
Image SLES15-SP4-Manager-Proxy-4-3-BYOS is installed
OR Image SLES15-SP4-Manager-Proxy-4-3-BYOS-Azure is installed
OR Image SLES15-SP4-Manager-Proxy-4-3-BYOS-EC2 is installed
OR Image SLES15-SP4-Manager-Server-4-3-BYOS is installed
OR Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure is installed
OR Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2 is installed
AND
cloud-init-19.4-8.17.1 is installed
OR cloud-init-config-suse-19.4-8.17.1 is installed
OR Package Information
SUSE Linux Enterprise High Performance Computing 15 SP4 is installed
OR SUSE Linux Enterprise Module for Public Cloud 15 SP4 is installed
OR SUSE Linux Enterprise Server 15 SP4 is installed
OR SUSE Linux Enterprise Server for SAP Applications 15 SP4 is installed
OR SUSE Manager Proxy 4.3 is installed
OR SUSE Manager Retail Branch Server 4.3 is installed
OR SUSE Manager Server 4.3 is installed
AND
cloud-init-21.4-150100.8.58.1 is installed
OR cloud-init-config-suse-21.4-150100.8.58.1 is installed
|
Definition Synopsis |
Release Information
SUSE Linux Enterprise High Performance Computing 15 SP2 is installed
OR SUSE Linux Enterprise Module for Public Cloud 15 SP2 is installed
OR SUSE Linux Enterprise Server 15 SP2 is installed
OR SUSE Linux Enterprise Server for SAP Applications 15 SP2 is installed
OR SUSE Linux Enterprise Storage 7 is installed
OR SUSE Manager Proxy 4.1 is installed
OR SUSE Manager Retail Branch Server 4.1 is installed
OR SUSE Manager Server 4.1 is installed
AND Package Information
cloud-init-19.4-8.20.1 is installed
OR cloud-init-config-suse-19.4-8.20.1 is installed
|