CVE-2026-44105: Cleartext password in logs
The credentials for the local user "user-app" may be exposed in log files, potentially enabling a low-privileged local attacker with access to the logs to authenticate via SSH as the limited user "user-app". Charging could be interrupted.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Operational
Clear or securely remove the log files that may contain the cleartext credentials for the local user "user-app" to prevent a local attacker with log access from authenticating via SSH as "user-app".
Event History
Frequently Asked Questions
What is the severity of CVE-2026-44105?
The severity of CVE-2026-44105 is medium with a score of 6.6.
What does CVE-2026-44105 involve?
CVE-2026-44105 involves the exposure of cleartext passwords in logs for the local user 'user-app'.
How can I mitigate CVE-2026-44105?
To mitigate CVE-2026-44105, ensure that sensitive information is not logged or use a logging solution that masks passwords.
Who is affected by CVE-2026-44105?
Any system that uses SSH with logging enabled, which captures the credentials for the user 'user-app', is affected by CVE-2026-44105.
What are the implications of CVE-2026-44105?
The implications of CVE-2026-44105 include the potential for low-privileged local attackers to gain unauthorized SSH access using the exposed credentials.