low2.3
CVE-2020-11932
It was discovered that the Subiquity installer for Ubuntu Server logged the LUKS full disk encryption password if one was entered.
Impact
It was discovered that the Subiquity installer for Ubuntu Server logged the LUKS full disk encryption password if one was entered.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Canonical | Subiquity | before 20.05.2 |
Weakness classification
References
- NVD record
- CVE.org record
- https://aliceandbob.company/the-human-factor-in-an-economy-of-scale/
- https://github.com/CanonicalLtd/subiquity/commit/7db70650feaf513d7fb6f1ca07f2d670a0890613
- https://aliceandbob.company/the-human-factor-in-an-economy-of-scale/
- https://github.com/CanonicalLtd/subiquity/commit/7db70650feaf513d7fb6f1ca07f2d670a0890613