CVE-2015-1320: Probe-and-enlist for SeaMicro chassis writes password to the log
Published Apr 22, 2019
·Updated
The SeaMicro provisioning of Ubuntu MAAS logs credentials, including username and password, for the management interface. This issue affects Ubuntu MAAS versions prior to 1.9.2.
Affected Software
1 affected component
Canonical Metal As A Service<1.9.2
Remediation
Patch Available
Event History
Apr 22, 2019
CVE Published
via MITRE·03:35 PM
Data Sourced
via MITRE·03:35 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2015-1320?
CVE-2015-1320 has a medium severity level due to sensitive credentials being logged.
2
How do I fix CVE-2015-1320?
To fix CVE-2015-1320, update Ubuntu MAAS to version 1.9.2 or later.
3
What versions of Ubuntu MAAS are affected by CVE-2015-1320?
CVE-2015-1320 affects all versions of Ubuntu MAAS prior to 1.9.2.
4
What type of information is exposed in CVE-2015-1320?
CVE-2015-1320 exposes sensitive credentials, including usernames and passwords, for the management interface.
5
Is there a workaround for CVE-2015-1320?
There is no specific workaround for CVE-2015-1320; upgrading to the fixed version is recommended.