Subiquity Exposes Plaintext Passphrase with Full Access

CVE-2022-0555

Summary

A security concern has been identified in Canonical's Subiquity, where the guided storage passphrase is displayed in plaintext, allowing unauthorized users with read permissions to access sensitive information. This exposure poses significant risks for system integrity and data confidentiality, particularly in environments where sensitive configurations are managed. Proper security practices should be employed to mitigate the risks associated with this vulnerability.

References