[{"CVE":"CVE-2020-8632","severity":"moderate","public_date":"2020-02-05T00:00:00Z","advisories":["RHSA-2020:3898"],"bugzilla":"1798728","bugzilla_description":"CVE-2020-8632 cloud-init: Too short random password length in cc_set_password in config/cc_set_passwords.py","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-330","affected_packages":["cloud-init-0:19.4-7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8632.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2020-8631","severity":"moderate","public_date":"2020-02-05T00:00:00Z","advisories":["RHSA-2020:3898"],"bugzilla":"1798731","bugzilla_description":"CVE-2020-8631 cloud-init: Use of random.choice when generating random password","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-330","affected_packages":["cloud-init-0:19.4-7.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8631.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2019-0816","severity":"moderate","public_date":"2019-03-05T00:00:00Z","advisories":["RHSA-2019:0597"],"bugzilla":"1680165","bugzilla_description":"CVE-2019-0816 cloud-init: extra ssh keys added to authorized_keys on the Azure platform","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-285","affected_packages":["cloud-init-0:18.2-1.el7_6.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-0816.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2018-10896","severity":"low","public_date":"2018-07-06T00:00:00Z","advisories":["RHSA-2020:3644","RHSA-2020:3050","RHSA-2020:3898"],"bugzilla":"1598831","bugzilla_description":"CVE-2018-10896 cloud-init: default configuration disabled deletion of SSH host keys","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-321","affected_packages":["cloud-init-0:18.5-12.el8_2.3","cloud-init-0:19.4-7.el7","cloud-init-0:19.4-1.el8.7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10896.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"4.6"},{"CVE":"CVE-2012-6639","severity":"important","public_date":"2014-01-07T00:00:00Z","advisories":[],"bugzilla":"1073591","bugzilla_description":"CVE-2012-6639 cloud-init: insecure transmission of EC2 instance data can lead to root privilege escalation","cvss_score":7.1,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:C/I:C/A:C","CWE":"CWE-290","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6639.json"}]