8.4

CVE-2022-0555

Exploit
Subiquity Shows Guided Storage Passphrase in Plaintext with Read-all Permissions
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Canonical ≫ Subiquity Version < 22.02.1
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.28% 0.197
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
134c704f-9b21-4f2e-91b3-4a467353bcc0 8.4 2.5 5.9
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-256 Plaintext Storage of a Password

The product stores a password in plaintext within resources such as memory or files.

https://bugs.launchpad.net/subiquity/+bug/1960162
Exploit
Issue Tracking
https://github.com/canonical/subiquity/pull/1181
Patch
Issue Tracking
https://github.com/canonical/subiquity/pull/1182
Patch
Issue Tracking
https://www.cve.org/CVERecord?id=CVE-2022-0555
Third Party Advisory