Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CVE Vulnerability Details :
CVE-2025-15480
PUBLISHED
More InfoOfficial Page
Assigner-canonical
Assigner Org ID-cc1ad9ee-3454-478d-9317-d3e869d708bc
View Known Exploited Vulnerability (KEV) details
Published At-09 Apr, 2026 | 15:02
Updated At-10 Apr, 2026 | 13:57
Rejected At-
▼CVE Numbering Authority (CNA)
Senstive information disclosure was affecting ubuntu-desktop-provision

In Ubuntu, ubuntu-desktop-provision version 24.04.4 could leak sensitive user credentials during crash reporting. Upon installation failure, if a user submitted a bug report to Launchpad, ubuntu-desktop-provision could include the user's password hash in the attached logs.

Affected Products
Vendor
Canonical Ltd.Canonical
Product
Ubuntu
Collection URL
https://github.com/canonical
Package Name
ubuntu-desktop-provision
Repo
https://github.com/canonical/ubuntu-desktop-provision
Platforms
  • Linux
Default Status
unaffected
Versions
Affected
  • From 0 through 24.04.4 (custom)
  • From 0 through 25.10 (custom)
  • From 0 through 25.04 (custom)
Problem Types
TypeCWE IDDescription
CWECWE-1258CWE-1258 Exposure of sensitive system information due to uncleared debug information
Type: CWE
CWE ID: CWE-1258
Description: CWE-1258 Exposure of sensitive system information due to uncleared debug information
Metrics
VersionBase scoreBase severityVector
4.02.7LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/E:U
Version: 4.0
Base score: 2.7
Base severity: LOW
Vector:
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/E:U
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://github.com/canonical/ubuntu-desktop-provision/pull/1400
patch
issue-tracking
https://github.com/canonical/ubuntu-desktop-provision/pull/1399
patch
issue-tracking
Hyperlink: https://github.com/canonical/ubuntu-desktop-provision/pull/1400
Resource:
patch
issue-tracking
Hyperlink: https://github.com/canonical/ubuntu-desktop-provision/pull/1399
Resource:
patch
issue-tracking
▼Authorized Data Publishers (ADP)
CISA ADP Vulnrichment
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
Details not found