| Package | Affected versions | Patched versions |
|---|---|---|
| cloud-init | ≤ 19.4 |
cloud-init through 19.4 relies on Mersenne Twister for a random password, which makes it easier for attackers to predict passwords, because rand_str in cloudinit/util.py calls the random.choice function.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free