EXPOSURES › CVE-2025-15480

CVE-2025-15480

CRITICAL

DETAIL

SourceNVD · cve Published2026-04-09 CVSS9.1 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2025-15480 ↗

▸ RECOMMENDED ACTION Critical severity — schedule patching of the affected products.

PLAYERS IMPLICATED

canonical · vendor ubuntu desktop provision · product

DESCRIPTION

In Ubuntu, ubuntu-desktop-provision version 24.04.4 could leak sensitive user credentials during crash reporting. Upon installation failure, if a user submitted a bug report to Launchpad, ubuntu-desktop-provision could include the user's password hash in the attached logs.

AFFECTED FEDRAMP PRODUCTS · 0

No correlated FedRAMP products.