Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
In Ubuntu, ubuntu-desktop-provision version 24.04.4 could leak sensitive user credentials during crash reporting. Upon installation failure, if a user submitted a bug report to Launchpad, ubuntu-desktop-provision could include the user's password hash in the attached logs.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
CVE-2025-15480 Sensitive Credential Leak in Ubuntu Desktop Provision 24.04.4 Crash Reports https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-15480
Post summary
The text merely announces CVE‑2025‑15480 and provides a link to a vulnerability details page, without delving into technical specifics, PoC, exploitation, or fixes.
CVE-2025-15480 In Ubuntu, ubuntu-desktop-provision version 24.04.4 could leak sensitive user credentials during crash reporting. Upon installation failure, if a user submitted a bug… https://www.cve.org/CVERecord?id=CVE-2025-15480
Post summary
CVE-2025-15480 is a disclosed vulnerability in Ubuntu’s ubuntu-desktop-provision 24.04.4 that can leak sensitive user credentials when an installation failure triggers crash‑reporting.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | canonical | ubuntu_desktop_provision | 24.04.4 | - | - |