Lucene search
CanonicalCVELIST:CVE-2020-11932HistoryMay 13, 2020 - 12:20 a.m.
CVE-2020-11932 Subiquity server installer logged LUKS full disk encryption password
2020-05-1300:20:13
CWE-532
canonical
www.cve.org
6
CVSS3
2.3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
AI Score
3.8
Confidence
High
EPSS
0
Percentile
12.6%
It was discovered that the Subiquity installer for Ubuntu Server logged the LUKS full disk encryption password if one was entered.
CNA Affected
[
{
"product": "Subiquity",
"vendor": "Canonical",
"versions": [
{
"lessThan": "20.05.2",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
]Related
nvd
nvd
CVE-2020-11932
2020-05-13 01:15:12
osv
osv
CVE-2020-11932
2020-05-13 01:15:12
prion
prion
Code injection
2020-05-13 01:15:00
githubexploit
githubexploit
ubuntucve
ubuntucve
CVE-2020-11932
2020-05-12 00:00:00
cve
cve
CVE-2020-11932
2020-05-13 01:15:12
CVSS3
2.3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
AI Score
3.8
Confidence
High
EPSS
0
Percentile
12.6%
Related for CVELIST:CVE-2020-11932