CVE-2020-11932

Description

It was discovered that the Subiquity installer for Ubuntu Server logged the LUKS full disk encryption password if one was entered.

CVSS breakdown

Affected products

• Canonical / Subiquityunspecified – 20.05.2

References

• PATCHhttps://github.com/CanonicalLtd/subiquity/commit/7db70650feaf513d7fb6f1ca07f2d670a0890613
• MISChttps://aliceandbob.company/the-human-factor-in-an-economy-of-scale/