Home > Vulnerability Database > CVE-2022-4968

Mend.io Vulnerability Database

New vulnerability? Tell us about it!

CVE-2022-4968

Date: June 6, 2024

netplan leaks the private key of wireguard to local users. Versions after 1.0 are not affected.

Severity Score

6.5

Related Resources (7)

Url: https://security-tracker.debian.org/tracker/CVE-2022-4968

Url: https://bugs.launchpad.net/ubuntu/+source/netplan.io/+bug/2065738

Url: https://github.com/canonical/netplan/commit/4c39b75b5c6ae7d976bda6da68da60d9a7f085ee

Url: https://bugs.launchpad.net/netplan/+bug/1987842

Url: https://nvd.nist.gov/vuln/detail/CVE-2022-4968

Url: https://www.cve.org/CVERecord?id=CVE-2022-4968

Url: https://www.mend.io/vulnerability-database/CVE-2022-4968

Severity Score

6.5

Weakness Type (CWE)

Information Leak / Disclosure

CWE-200

Exposure of Sensitive System Information to an Unauthorized Control Sphere

CWE-497

CVSS v3.1

Base Score:	6.5
Attack Vector (AV):	LOCAL
Attack Complexity (AC):	LOW
Privileges Required (PR):	LOW
User Interaction (UI):	NONE
Scope (S):	CHANGED
Confidentiality (C):	HIGH
Integrity (I):	NONE
Availability (A):	NONE

Do you need more information?

Contact Us