[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fb042lxrjLnJ7DHVzpn6poS49LYkYIYtIifyeZfU7bxc":3,"g5a-risk:CVE-2021-3429":106},{"success":4,"data":5,"meta":103},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":37,"epssPercentile":27,"epssTimeSeries":38,"severity":39,"affectedProducts":40,"affectedProductsCount":46,"references":47,"referencesCount":55,"weaknesses":56,"weaknessesCount":46,"isActivelyExploited":65,"cisaInfo":27,"otxData":27,"relatedBlogPosts":66,"seoMetadata":67,"configurations":92,"relatedVendorCves":101,"notableEvents":102},"CVE-2021-3429","What is CVE-2021-3429?","When instructing cloud-init to set a random password for a new user account, versions before 21.2 would write that password to the world-readable log file \u002Fvar\u002Flog\u002Fcloud-init-output.log. This could allow a local user to log in as another user.","When instructing cloud-init to set a random password for a new user account, versions before 21.2 would write that password to the world-readable log file \u002Fv...","2023-04-19T22:15:10.137","2025-02-05T15:15:13.403",5.5,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":27,"CVSSMetricV40":27},[16,30,34],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"security@ubuntu.com","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":23,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","LOCAL","LOW","NONE","UNCHANGED","HIGH","MEDIUM",null,1.8,3.6,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":23,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},{"Source":35,"Type":18,"CVSSData":36,"ExploitabilityScore":28,"ImpactScore":29},"134c704f-9b21-4f2e-91b3-4a467353bcc0",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":23,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},0.00219,[37,37,37,37,37,37,37],"Medium",[41],{"vendor":42,"product":43,"version":44,"criteria":45,"vulnerable":4},"canonical","cloud-init","*","cpe:2.3:a:canonical:cloud-init:*:*:*:*:*:*:*:*",1,[48,53],{"url":49,"source":50,"tags":51},"https:\u002F\u002Fgithub.com\u002Fcanonical\u002Fcloud-init\u002Fcommit\u002Fb794d426b9ab43ea9d6371477466070d86e10668","GitHub",[52],"Patch",{"url":49,"source":50,"tags":54},[52],2,[57],{"id":58,"name":59,"description":60,"extendedDescription":61,"status":62,"abstraction":63,"structure":64},"CWE-532","Insertion of Sensitive Information into Log File","Information written to log files can be of a sensitive nature and give valuable guidance to an attacker or expose sensitive user information.","While logging all information may be helpful during development stages, it is important that logging levels be set appropriately before a product ships so that sensitive user data and system information are not accidentally exposed to potential attackers.\nDifferent log files may be produced and stored for:","Incomplete","Base","Simple",false,[],{"title":68,"metaDescription":69,"keywords":70,"canonicalUrl":71,"structuredData":72},"What is CVE-2021-3429? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2021-3429, a medium severity cyber security vulnerability from 2023. When instructing cloud-init to set a random password for a...","CVE-2021-3429, CVE-2021-3429 vulnerability, CVE-2021-3429 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2023, CVSS score, exploit, patch, remediation, canonical security, cloud-init vulnerability","\u002Fwhat-is\u002Fcve-2021-3429",{"@context":73,"@type":74,"headline":68,"description":69,"datePublished":10,"dateModified":11,"author":75,"publisher":79,"about":83,"mainEntityOfPage":87,"articleSection":90,"keywords":91},"https:\u002F\u002Fschema.org","TechArticle",{"@type":76,"name":77,"url":78},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":76,"name":77,"url":78,"logo":80},{"@type":81,"url":82},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":84,"name":6,"description":85,"additionalType":86},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":88,"@id":89},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2021-3429","Cybersecurity","CVE-2021-3429, CVE-2021-3429 vulnerability, CVE-2021-3429 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[93],{"Operator":27,"Negate":27,"Nodes":94},[95],{"Operator":96,"Negate":27,"CPEMatch":97},"OR",[98],{"Vulnerable":4,"Criteria":45,"MatchCriteriaID":99,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":100,"VersionEndIncluding":27},"24AE1645-A98F-41D7-8F77-8647A25E6B4A","21.2",[],[],{"lastModified":11,"cacheTime":104,"version":105},1793206473104,"2.0",{"score":107,"band":108,"action":109,"scoredAt":110},18,"Info","Track","2026-07-01T10:30:17.689944+00:00"]