Описание
Improper configuration in system firmware for EDK II may allow unauthenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | not-affected | code not built |
| cosmic | ignored | end of life |
| devel | not-affected | 0~20191122.bd85bf54-1 |
| disco | ignored | end of life |
| eoan | not-affected | 0~20190606.20d2e5a1-2ubuntu1 |
| esm-apps/bionic | not-affected | code not built |
| esm-apps/xenial | not-affected | code not built |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was needs-triage] |
| precise/esm | DNE | |
| trusty | ignored | end of standard support |
Показывать по
EPSS
4.6 Medium
CVSS2
7.8 High
CVSS3
Связанные уязвимости
Improper configuration in system firmware for EDK II may allow unauthenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access.
Improper configuration in system firmware for EDK II may allow unauthenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access.
Improper configuration in system firmware for EDK II may allow unauthe ...
Improper configuration in system firmware for EDK II may allow unauthenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access.
Уязвимость среды с открытым исходным кодом для разработки UEFI EDK2, связанная с недостатками контроля доступа, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
EPSS
4.6 Medium
CVSS2
7.8 High
CVSS3