CVE-2021-3429

CVE-2021-3429 describes a vulnerability in Canonical cloud-init versions prior to 21.2 where randomly generated user passwords were inadvertently written to the world-readable /var/log/cloud-init-output.log file. This flaw allows a local attacker to gain unauthorized access to other user accounts. With a CVSS score of 5.5 (Medium), the vulnerability has a low attack complexity and requires local user privileges, but can lead to high confidentiality impact. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.