CVE-2020-11932

LOW 2.3CVE-2020-11932 · Published 13/05/2020 · updated 17/06/2026

In short

CVE-2020-11932 is a LOW (CVSS 2.3) vulnerability affecting subiquity (canonical).
Chance of exploitation in the next 30 days (EPSS): 0.60%, higher than 48.5% of all vulnerabilities.
Fix: update to 20.05.2 or later.

Package	Affected versions	Patched versions
subiquity canonical	`< 20.05.2`	`20.05.2`

It was discovered that the Subiquity installer for Ubuntu Server logged the LUKS full disk encryption password if one was entered.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.