CVE-2020-11932 LOW

CVE-2020-11932: Subiquity server installer logged LUKS full disk encryption password

Vendor Canonical

Product Subiquity

Weakness CWE-532 · Sensitive info in logs

Published May 13, 2020

Last update September 16, 2024

CVSS base score

2.3/10

Attack vector Local

Attack complexity Low

Privileges required High

User interaction None

Confidentiality Low

Integrity None

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

What the vulnerability does

01Description

It was discovered that the Subiquity installer for Ubuntu Server logged the LUKS full disk encryption password if one was entered.

Key dates

May 13, 2020 CVE published

September 16, 2024 Record updated

External resources

Related vulnerabilities