← Retour aux CVEs
CVE-2020-11932
LOW2.3
Description
It was discovered that the Subiquity installer for Ubuntu Server logged the LUKS full disk encryption password if one was entered.
Details CVE
Score CVSS v3.12.3
SeveriteLOW
Vecteur CVSSCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
Vecteur d'attaqueLOCAL
ComplexiteLOW
Privileges requisHIGH
Interaction utilisateurNONE
Publie5/13/2020
Derniere modification11/21/2024
Sourcenvd
Observations honeypot0
Produits affectes
canonical:subiquity
Faiblesses (CWE)
CWE-532CWE-532
References
https://aliceandbob.company/the-human-factor-in-an-economy-of-scale/(security@ubuntu.com)
https://github.com/CanonicalLtd/subiquity/commit/7db70650feaf513d7fb6f1ca07f2d670a0890613(security@ubuntu.com)
https://aliceandbob.company/the-human-factor-in-an-economy-of-scale/(af854a3a-2127-422b-91ae-364da2661108)
https://github.com/CanonicalLtd/subiquity/commit/7db70650feaf513d7fb6f1ca07f2d670a0890613(af854a3a-2127-422b-91ae-364da2661108)
Correlations IOC
Aucune correlation enregistree
This product uses data from the NVD API but is not endorsed or certified by the NVD.