Approved changes feed: RSS · Atom

cpe:2.3:a:canonical:subiquity:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCanonical (bedcba35-8c3d-5a60-8532-2ba876a6ec88)
ProductSubiquity (8739eab7-ec37-55b1-b272-5ee52c4d4c12)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/ubuntu/subiquity purl2cpe 2026-06-01 10:12:43.398904
pkg:github/canonical/subiquity purl2cpe 2026-06-01 10:12:43.398908

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-5182 vulnerable 2026-06-08 06:19:42.782288 Details available
MEDIUM (5.5)
Sensitive data could be exposed in logs of subiquity version 23.09.1 and earlier. An attacker in the adm group could use this information to find hashed passwords and possibly escalate their privilege.
Published: 2023-10-06T23:28:48.953Z
Updated: 2024-09-19T16:41:29.487Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-0555 vulnerable 2026-06-08 05:39:10.289789 Details available
Subiquity Shows Guided Storage Passphrase in Plaintext with Read-all Permissions
Published: 2024-06-03T18:17:35.956Z
Updated: 2024-08-02T23:32:46.539Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-11932 vulnerable 2026-06-08 05:17:55.254852 Subiquity server installer logged LUKS full disk encryption password
LOW (2.3)
It was discovered that the Subiquity installer for Ubuntu Server logged the LUKS full disk encryption password if one was entered.
Published: 2020-05-13T00:20:13.011Z
Updated: 2024-09-16T23:05:48.869Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.