[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fF7xEEGqjebcQklod6PIMDc59aHfGXGN-5cN20Mda-0Q":3,"g5a-risk:CVE-2018-10896":127},{"success":4,"data":5,"meta":125},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":51,"epssPercentile":26,"epssTimeSeries":52,"severity":53,"affectedProducts":54,"affectedProductsCount":60,"references":61,"referencesCount":76,"weaknesses":77,"weaknessesCount":60,"isActivelyExploited":86,"cisaInfo":26,"otxData":26,"relatedBlogPosts":87,"seoMetadata":88,"configurations":113,"relatedVendorCves":123,"notableEvents":124},"CVE-2018-10896","What is CVE-2018-10896?","The default cloud-init configuration, in cloud-init 0.6.2 and newer, included \"ssh_deletekeys: 0\", disabling cloud-init's deletion of ssh host keys. In some environments, this could lead to instances created by cloning a golden master or template system, sharing ssh host keys, and being able to impersonate one another or conduct man-in-the-middle attacks.","The default cloud-init configuration, in cloud-init 0.6.2 and newer, included \"ssh_deletekeys: 0\", disabling cloud-init's deletion of ssh host keys. In some ...","2018-08-01T17:29:00.393","2023-02-13T04:51:37.157",7.1,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":29,"CVSSMetricV2":42,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","LOCAL","LOW","NONE","UNCHANGED","HIGH",null,1.8,5.2,[30],{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":40,"ImpactScore":41},"secalert@redhat.com","Secondary",{"Version":34,"VectorString":35,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":36,"Scope":37,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":23,"BaseScore":38,"BaseSeverity":39,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.0","CVSS:3.0\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N","REQUIRED","CHANGED",4.6,"MEDIUM",1.5,2.7,[43],{"Source":17,"Type":18,"CVSSData":44,"BaseSeverity":22,"ExploitabilityScore":49,"ImpactScore":50,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":45,"VectorString":46,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":47,"IntegrityImpact":47,"AvailabilityImpact":23,"BaseScore":48,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:L\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:N","PARTIAL",3.6,3.9,4.9,0.00354,[51,51,51,51,51,51,51],"High",[55],{"vendor":56,"product":57,"version":58,"criteria":59,"vulnerable":4},"canonical","cloud-init","*","cpe:2.3:a:canonical:cloud-init:*:*:*:*:*:*:*:*",1,[62,68,73],{"url":63,"source":64,"tags":65},"https:\u002F\u002Fbugs.launchpad.net\u002Fcloud-init\u002F+bug\u002F1781094","Launchpad",[66,67],"Patch","Third Party Advisory",{"url":69,"source":70,"tags":71},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=1574338","Red Hat",[72,67],"Issue Tracking",{"url":74,"source":70,"tags":75},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=CVE-2018-10896",[72,66,67],3,[78],{"id":79,"name":80,"description":81,"extendedDescription":82,"status":83,"abstraction":84,"structure":85},"CWE-321","Use of Hard-coded Cryptographic Key","The use of a hard-coded cryptographic key significantly increases the possibility that encrypted data may be recovered.","","Draft","Variant","Simple",false,[],{"title":89,"metaDescription":90,"keywords":91,"canonicalUrl":92,"structuredData":93},"What is CVE-2018-10896? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2018-10896, a high severity cyber security vulnerability from 2018. The default cloud-init configuration, in cloud-init 0.6.2 a...","CVE-2018-10896, CVE-2018-10896 vulnerability, CVE-2018-10896 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, canonical security, cloud-init vulnerability","\u002Fwhat-is\u002Fcve-2018-10896",{"@context":94,"@type":95,"headline":89,"description":90,"datePublished":10,"dateModified":11,"author":96,"publisher":100,"about":104,"mainEntityOfPage":108,"articleSection":111,"keywords":112},"https:\u002F\u002Fschema.org","TechArticle",{"@type":97,"name":98,"url":99},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":97,"name":98,"url":99,"logo":101},{"@type":102,"url":103},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":105,"name":6,"description":106,"additionalType":107},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":109,"@id":110},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2018-10896","Cybersecurity","CVE-2018-10896, CVE-2018-10896 vulnerability, CVE-2018-10896 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[114],{"Operator":26,"Negate":26,"Nodes":115},[116],{"Operator":117,"Negate":26,"CPEMatch":118},"OR",[119],{"Vulnerable":4,"Criteria":59,"MatchCriteriaID":120,"VersionStartExcluding":26,"VersionStartIncluding":121,"VersionEndExcluding":122,"VersionEndIncluding":26},"758D7EF5-40B9-427F-90C3-FF2DC0849311","0.6.2","18.4",[],[],{"lastModified":11,"cacheTime":126,"version":45},1793206911591,{"score":128,"band":129,"action":130,"scoredAt":131},46,"Medium","Plan remediation","2026-07-01T10:22:38.868114+00:00"]