CVE Vulnerabilities

CVE-2022-0555

Plaintext Storage of a Password

Published: Jun 03, 2024 | Modified: Nov 21, 2024
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
MEDIUM

Subiquity Shows Guided Storage Passphrase in Plaintext with Read-all Permissions

Weakness

Storing a password in plaintext may result in a system compromise.

Affected Software

Name Vendor Start Version End Version
Subiquity Ubuntu bionic *
Subiquity Ubuntu esm-apps/bionic *
Subiquity Ubuntu esm-apps/focal *
Subiquity Ubuntu esm-apps/jammy *
Subiquity Ubuntu focal *
Subiquity Ubuntu impish *
Subiquity Ubuntu jammy *
Subiquity Ubuntu kinetic *
Subiquity Ubuntu lunar *
Subiquity Ubuntu snap *
Subiquity Ubuntu upstream *

Potential Mitigations

References