← Zuruck zu CVEs
CVE-2020-11932
LOW2.3
Beschreibung
It was discovered that the Subiquity installer for Ubuntu Server logged the LUKS full disk encryption password if one was entered.
CVE Details
CVSS v3.1 Bewertung2.3
SchweregradLOW
CVSS VektorCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
AngriffsvektorLOCAL
KomplexitatLOW
Erforderliche PrivilegienHIGH
BenutzerinteraktionNONE
Veroffentlicht5/13/2020
Zuletzt geandert11/21/2024
Quellenvd
Honeypot-Sichtungen0
Betroffene Produkte
canonical:subiquity
Schwachen (CWE)
CWE-532CWE-532
Referenzen
https://aliceandbob.company/the-human-factor-in-an-economy-of-scale/(security@ubuntu.com)
https://github.com/CanonicalLtd/subiquity/commit/7db70650feaf513d7fb6f1ca07f2d670a0890613(security@ubuntu.com)
https://aliceandbob.company/the-human-factor-in-an-economy-of-scale/(af854a3a-2127-422b-91ae-364da2661108)
https://github.com/CanonicalLtd/subiquity/commit/7db70650feaf513d7fb6f1ca07f2d670a0890613(af854a3a-2127-422b-91ae-364da2661108)
IOC Korrelationen
Keine Korrelationen erfasst
This product uses data from the NVD API but is not endorsed or certified by the NVD.