遠端 CentOS Linux 7 主機上安裝的套件受到 CESA-2020: 3898 公告中所提及的多個弱點影響。

  - cloud-init：預設組態已停用對 SSH 主機金鑰的刪除 (CVE-2018-10896)

  - cloud-init：產生隨機密碼時使用 random.choice (CVE-2020-8631)

  - cloud-init：config/cc_set_passwords.py 中 cc_set_password 的隨機密碼長度太短 (CVE-2020-8632)

請注意，Nessus 並未測試此問題，而是僅依據應用程式自我報告的版本號碼。

遠端主機上安裝的測試產品版本比測試版本舊。因此，會受到 ALAS2-2021-1576 公告中所提及的多個弱點影響。

  - cloud-init 0.6.2 和更新版本中的預設 cloud-init 組態包含 ssh_deletekeys: 0，導致停用 cloud-init 的 ssh 主機金鑰刪除。在某些環境中，這可導致有心人士透過複製 Golden Master 或範本系統、共用 ssh 主機金鑰，以及偽造他人或發動攔截式攻擊來建立執行個體。(CVE-2018-10896)

  - 19.4 及之前的 cloud-init 依賴 Mersenne Twister 取得隨機密碼，這使得攻擊者更容易預測密碼，因為 cloudinit/util.py 中的 rand_str 會呼叫 random.choice 函式。
    (CVE-2020-8631)

  - 在 19.4 及之前的 cloud-init，cloudinit/config/cc_set_passwords.py 中的 rand_user_password 具有一個較小的預設 pwlen 值，這使得攻擊者更容易猜出密碼。(CVE-2020-8632)

請注意，Nessus 並未測試此問題，而是僅依據應用程式自我報告的版本號碼。

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has cloud-init packages installed that are affected by multiple vulnerabilities:

  - The default cloud-init configuration, in cloud-init 0.6.2 and newer, included ssh_deletekeys: 0,     disabling cloud-init's deletion of ssh host keys. In some environments, this could lead to instances     created by cloning a golden master or template system, sharing ssh host keys, and being able to     impersonate one another or conduct man-in-the-middle attacks. (CVE-2018-10896)

  - A security feature bypass exists in Azure SSH Keypairs, due to a change in the provisioning logic for some     Linux images that use cloud-init, aka 'Azure SSH Keypairs Security Feature Bypass Vulnerability'.
    (CVE-2019-0816)

  - cloud-init through 19.4 relies on Mersenne Twister for a random password, which makes it easier for     attackers to predict passwords, because rand_str in cloudinit/util.py calls the random.choice function.
    (CVE-2020-8631)

  - In cloud-init through 19.4, rand_user_password in cloudinit/config/cc_set_passwords.py has a small default     pwlen value, which makes it easier for attackers to guess passwords. (CVE-2020-8632)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the cloud-init package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - The default cloud-init configuration, in cloud-init 0.6.2 and newer, included 'ssh_deletekeys: 0',     disabling cloud-init's deletion of ssh host keys. In some environments, this could lead to instances     created by cloning a golden master or template system, sharing ssh host keys, and being able to     impersonate one another or conduct man-in-the-middle attacks. (CVE-2018-10896)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the cloud-init package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability :

  - The default cloud-init configuration, in cloud-init     0.6.2 and newer, included 'ssh_deletekeys: 0',     disabling cloud-init's deletion of ssh host keys. In     some environments, this could lead to instances created     by cloning a golden master or template system, sharing     ssh host keys, and being able to impersonate one     another or conduct man-in-the-middle     attacks.(CVE-2018-10896)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:3898 advisory.

  - cloud-init: default configuration disabled deletion of SSH host keys (CVE-2018-10896)

  - cloud-init: Use of random.choice when generating random password (CVE-2020-8631)

  - cloud-init: Too short random password length in cc_set_password in config/cc_set_passwords.py     (CVE-2020-8632)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has cloud-init packages installed that are affected by multiple vulnerabilities:

  - The default cloud-init configuration, in cloud-init 0.6.2 and newer, included ssh_deletekeys: 0,     disabling cloud-init's deletion of ssh host keys. In some environments, this could lead to instances     created by cloning a golden master or template system, sharing ssh host keys, and being able to     impersonate one another or conduct man-in-the-middle attacks. (CVE-2018-10896)

  - In cloud-init through 19.4, rand_user_password in cloudinit/config/cc_set_passwords.py has a small default     pwlen value, which makes it easier for attackers to guess passwords. (CVE-2020-8632)

  - cloud-init through 19.4 relies on Mersenne Twister for a random password, which makes it easier for     attackers to predict passwords, because rand_str in cloudinit/util.py calls the random.choice function.
    (CVE-2020-8631)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched.

  - cloud-init: default configuration disabled deletion of SSH host keys (CVE-2018-10896)

Note that Nessus has not tested for this issue but has instead relied on the package manager's report that the package is installed.

ID	名稱	產品	系列	已發布	已更新	嚴重性
164556	Nutanix AOS : 複数の脆弱性 (NXSA-AOS-5.19.0.5)	Nessus	Misc.	2022/9/1	2024/3/8	critical
141635	CentOS 7：cloud-init (CESA-2020: 3898)	Nessus	CentOS Local Security Checks	2020/10/20	2022/8/25	high
144795	Amazon Linux 2：cloud-init (ALAS-2021-1576)	Nessus	Amazon Linux Local Security Checks	2021/1/7	2021/1/7	high
164599	Nutanix AOS：多個弱點 (NXSA-AOS-5.15.5)	Nessus	Misc.	2022/9/1	2024/4/8	critical
164556	Nutanix AOS：多個弱點 (NXSA-AOS-5.19.0.5)	Nessus	Misc.	2022/9/1	2024/3/8	critical
154516	NewStart CGSL CORE 5.05 / MAIN 5.05 : cloud-init Multiple Vulnerabilities (NS-SA-2021-0151)	Nessus	NewStart CGSL Local Security Checks	2021/10/27	2023/11/27	high
160701	EulerOS Virtualization 3.0.2.0 : cloud-init (EulerOS-SA-2022-1682)	Nessus	Huawei Local Security Checks	2022/5/7	2022/5/7	high
169607	EulerOS Virtualization 3.0.2.6 : cloud-init (EulerOS-SA-2023-1085)	Nessus	Huawei Local Security Checks	2023/1/6	2023/1/6	high
165898	EulerOS Virtualization 3.0.6.6 : cloud-init (EulerOS-SA-2022-2490)	Nessus	Huawei Local Security Checks	2022/10/9	2022/10/9	high
140989	EulerOS Virtualization for ARM 64 3.0.6.0 : cloud-init (EulerOS-SA-2020-2041)	Nessus	Huawei Local Security Checks	2020/9/29	2024/2/16	high
141025	RHEL 7 : cloud-init (RHSA-2020:3898)	Nessus	Red Hat Local Security Checks	2020/9/29	2023/5/25	high
147387	NewStart CGSL CORE 5.04 / MAIN 5.04 : cloud-init Multiple Vulnerabilities (NS-SA-2021-0016)	Nessus	NewStart CGSL Local Security Checks	2021/3/10	2021/3/11	high
198715	RHEL 6 : cloud-init (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	2024/6/3	2024/6/3	high

偵測

搜尋 Plugin

critical

high

high

critical

critical

high

high

high

high

high

high

high

high