远程主机上安装的测试产品版本低于测试版本。因此，如公告 ALAS2-2021-1576 所述，该主机受到多个漏洞的影响。

  - cloud-init 0.6.2 及更高版本中的默认 cloud-init 配置包含 ssh_deletekeys: 0，可禁用 cloud-init 删除 ssh 主机密钥。在某些环境中，攻击者可利用此漏洞，通过克隆 golden master 或模板系统、共享 ssh 主机密钥和冒充其他用户，或发起中间人攻击来创建实例。(CVE-2018-10896)

  - 19.4 及之前的 cloud-init 依赖 Mersenne Twister 获取随机密码，这让攻击者可以更轻松地预测密码，原因在于 cloudinit/util.py 中的 rand_str 调用 random.choice 函数。
    (CVE-2020-8631)

  - 在 19.4 及之前的 cloud-init 中，cloudinit/config/cc_set_passwords.py 中的 rand_user_password 具有一个较小的默认 pwlen 值，这让攻击者可以更轻松地猜测密码。(CVE-2020-8632)

请注意，Nessus 尚未测试此问题，而是只依赖于应用程序自我报告的版本号。

远程 CentOS Linux 7 主机上安装的程序包受到 CESA-2020: 3898 公告中提及的多个漏洞的影响。

  - cloud-init：默认配置已禁用对 SSH 主机密钥的删除 (CVE-2018-10896)

  - cloud-init：生成随机密码时使用 random.choice (CVE-2020-8631)

  - cloud-init：config/cc_set_passwords.py 的 cc_set_password 中的随机密码长度太短 (CVE-2020-8632)

请注意，Nessus 尚未测试此问题，而是只依据应用程序自我报告的版本号进行判断。

According to the version of the cloud-init package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability :

  - The default cloud-init configuration, in cloud-init     0.6.2 and newer, included 'ssh_deletekeys: 0',     disabling cloud-init's deletion of ssh host keys. In     some environments, this could lead to instances created     by cloning a golden master or template system, sharing     ssh host keys, and being able to impersonate one     another or conduct man-in-the-middle     attacks.(CVE-2018-10896)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:3898 advisory.

  - cloud-init: default configuration disabled deletion of SSH host keys (CVE-2018-10896)

  - cloud-init: Use of random.choice when generating random password (CVE-2020-8631)

  - cloud-init: Too short random password length in cc_set_password in config/cc_set_passwords.py     (CVE-2020-8632)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has cloud-init packages installed that are affected by multiple vulnerabilities:

  - The default cloud-init configuration, in cloud-init 0.6.2 and newer, included ssh_deletekeys: 0,     disabling cloud-init's deletion of ssh host keys. In some environments, this could lead to instances     created by cloning a golden master or template system, sharing ssh host keys, and being able to     impersonate one another or conduct man-in-the-middle attacks. (CVE-2018-10896)

  - In cloud-init through 19.4, rand_user_password in cloudinit/config/cc_set_passwords.py has a small default     pwlen value, which makes it easier for attackers to guess passwords. (CVE-2020-8632)

  - cloud-init through 19.4 relies on Mersenne Twister for a random password, which makes it easier for     attackers to predict passwords, because rand_str in cloudinit/util.py calls the random.choice function.
    (CVE-2020-8631)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has cloud-init packages installed that are affected by multiple vulnerabilities:

  - The default cloud-init configuration, in cloud-init 0.6.2 and newer, included ssh_deletekeys: 0,     disabling cloud-init's deletion of ssh host keys. In some environments, this could lead to instances     created by cloning a golden master or template system, sharing ssh host keys, and being able to     impersonate one another or conduct man-in-the-middle attacks. (CVE-2018-10896)

  - A security feature bypass exists in Azure SSH Keypairs, due to a change in the provisioning logic for some     Linux images that use cloud-init, aka 'Azure SSH Keypairs Security Feature Bypass Vulnerability'.
    (CVE-2019-0816)

  - cloud-init through 19.4 relies on Mersenne Twister for a random password, which makes it easier for     attackers to predict passwords, because rand_str in cloudinit/util.py calls the random.choice function.
    (CVE-2020-8631)

  - In cloud-init through 19.4, rand_user_password in cloudinit/config/cc_set_passwords.py has a small default     pwlen value, which makes it easier for attackers to guess passwords. (CVE-2020-8632)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the cloud-init package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - The default cloud-init configuration, in cloud-init 0.6.2 and newer, included 'ssh_deletekeys: 0',     disabling cloud-init's deletion of ssh host keys. In some environments, this could lead to instances     created by cloning a golden master or template system, sharing ssh host keys, and being able to     impersonate one another or conduct man-in-the-middle attacks. (CVE-2018-10896)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched.

  - cloud-init: default configuration disabled deletion of SSH host keys (CVE-2018-10896)

Note that Nessus has not tested for this issue but has instead relied on the package manager's report that the package is installed.

ID	Name	Product	Family	Published	Updated	Severity
164599	Nutanix AOS：多個弱點 (NXSA-AOS-5.15.5)	Nessus	Misc.	9/1/2022	4/8/2024	critical
144795	Amazon Linux 2：cloud-init (ALAS-2021-1576)	Nessus	Amazon Linux Local Security Checks	1/7/2021	1/7/2021	high
141635	CentOS 7：cloud-init (CESA-2020: 3898)	Nessus	CentOS Local Security Checks	10/20/2020	8/25/2022	high
164556	Nutanix AOS：多个漏洞 (NXSA-AOS-5.19.0.5)	Nessus	Misc.	9/1/2022	3/8/2024	critical
164599	Nutanix AOS：多个漏洞 (NXSA-AOS-5.15.5)	Nessus	Misc.	9/1/2022	4/8/2024	critical
140989	EulerOS Virtualization for ARM 64 3.0.6.0 : cloud-init (EulerOS-SA-2020-2041)	Nessus	Huawei Local Security Checks	9/29/2020	2/16/2024	high
141025	RHEL 7 : cloud-init (RHSA-2020:3898)	Nessus	Red Hat Local Security Checks	9/29/2020	5/25/2023	high
147387	NewStart CGSL CORE 5.04 / MAIN 5.04 : cloud-init Multiple Vulnerabilities (NS-SA-2021-0016)	Nessus	NewStart CGSL Local Security Checks	3/10/2021	3/11/2021	high
154516	NewStart CGSL CORE 5.05 / MAIN 5.05 : cloud-init Multiple Vulnerabilities (NS-SA-2021-0151)	Nessus	NewStart CGSL Local Security Checks	10/27/2021	11/27/2023	high
160701	EulerOS Virtualization 3.0.2.0 : cloud-init (EulerOS-SA-2022-1682)	Nessus	Huawei Local Security Checks	5/7/2022	5/7/2022	high
165898	EulerOS Virtualization 3.0.6.6 : cloud-init (EulerOS-SA-2022-2490)	Nessus	Huawei Local Security Checks	10/9/2022	10/9/2022	high
169607	EulerOS Virtualization 3.0.2.6 : cloud-init (EulerOS-SA-2023-1085)	Nessus	Huawei Local Security Checks	1/6/2023	1/6/2023	high
198715	RHEL 6 : cloud-init (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	6/3/2024	6/3/2024	high

Detections

Analytics

Plugins Search

critical

high

high

critical

critical

high

high

high

high

high

high

high

high