Описание
An insecure default to allow UEFI Shell in EDK2 was left enabled in Ubuntu's EDK2. This allows an OS-resident attacker to bypass Secure Boot.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | ignored | end of standard support |
| devel | released | 2023.11-7 |
| esm-apps/bionic | needs-triage | |
| esm-apps/xenial | needs-triage | |
| esm-infra/focal | released | 0~20191122.bd85bf54-2ubuntu3.5 |
| focal | released | 0~20191122.bd85bf54-2ubuntu3.5 |
| jammy | released | 2022.02-3ubuntu0.22.04.2 |
| lunar | ignored | end of life, was needs-triage |
| mantic | released | 2023.05-2ubuntu0.1 |
| noble | released | 2023.11-7 |
Показывать по
EPSS
6.7 Medium
CVSS3
Связанные уязвимости
An insecure default to allow UEFI Shell in EDK2 was left enabled in Ubuntu's EDK2. This allows an OS-resident attacker to bypass Secure Boot.
An insecure default to allow UEFI Shell in EDK2 was left enabled in Ub ...
An insecure default to allow UEFI Shell in EDK2 was left enabled in Ubuntu's EDK2. This allows an OS-resident attacker to bypass Secure Boot.
Уязвимость среды с открытым исходным кодом для разработки UEFI EDK2, связанная с ошибками конфигурации, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
EPSS
6.7 Medium
CVSS3