← Back to CVEs
CVE-2020-11932
LOW2.3
Description
It was discovered that the Subiquity installer for Ubuntu Server logged the LUKS full disk encryption password if one was entered.
CVE Details
CVSS v3.1 Score2.3
SeverityLOW
CVSS VectorCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
Attack VectorLOCAL
ComplexityLOW
Privileges RequiredHIGH
User InteractionNONE
Published5/13/2020
Last Modified11/21/2024
Sourcenvd
Honeypot Sightings0
Affected Products
canonical:subiquity
Weaknesses (CWE)
CWE-532CWE-532
References
https://aliceandbob.company/the-human-factor-in-an-economy-of-scale/(security@ubuntu.com)
https://github.com/CanonicalLtd/subiquity/commit/7db70650feaf513d7fb6f1ca07f2d670a0890613(security@ubuntu.com)
https://aliceandbob.company/the-human-factor-in-an-economy-of-scale/(af854a3a-2127-422b-91ae-364da2661108)
https://github.com/CanonicalLtd/subiquity/commit/7db70650feaf513d7fb6f1ca07f2d670a0890613(af854a3a-2127-422b-91ae-364da2661108)
IOC Correlations
No correlations recorded
This product uses data from the NVD API but is not endorsed or certified by the NVD.