CVE-2020-11932
CVE-2020-11932 · Subiquity server installer logged LUKS full disk encryption password
This page contains facts from public vulnerability sources. Check the original advisory before updating.
It was discovered that the Subiquity installer for Ubuntu Server logged the LUKS full disk encryption password if one was entered.
CVSS 2.3 · Low · EPSS 0.6% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
subiquity
- Versions
- ≥ unspecified, < 20.05.2: Affected (custom)
Update to 20.05.2
subiquity Ubuntu:18.04:LTS
- Versions
- 0.0.29
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
subiquity Ubuntu:20.04:LTS
- Versions
- 19.08.1.4
- 19.12.1.1
- 19.12.1.1+git71gea8d463f
- 19.12.2+git106g3d9374ad
- 20.03.3+git107gb7ae4d06
- 20.03.3+git147gb34aeda0
- 20.04.1+git45g5f9fae19
- 20.04.1+git45g5f9fae19ubuntu0.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
subiquity Ubuntu:22.04:LTS
- Versions
- 20.04.3+git84g6a5e36ed
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published