CVE Catalog

CVE-2022-4968

Medium
Published: Translated: NVD NIST

Summary

Netplan leaks the private key of WireGuard to local users. Versions after 1.0 are not affected.

Risk Assessment

A local user can access the WireGuard private key, potentially compromising the VPN tunnel confidentiality and allowing unauthorized network access.

Recommendation

Update netplan to version 1.0 or later, which does not leak the WireGuard private key to local users.

Original NVD description (English source)

netplan leaks the private key of wireguard to local users. Versions after 1.0 are not affected.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS