Red Hat Enterprise Linux Log Information Leakage Vulnerability

Red Hat Enterprise Linux versions 7, 8, 9, and 10 have a vulnerability related to log information leakage. This vulnerability stems from the clevis-PKCS11 pin’s clevis-pkcs11-afunix-socket-unlock daemon, which records LUKS disk encryption passwords in plain text into log files. Additionally, when...

Red Hat Enterprise Linux Authorization Vulnerabilities

Red Hat Enterprise Linux versions 7, 8, 9, and 10 have authorization-related vulnerabilities. These vulnerabilities stem from the clevis-PKCS11 pin component; the clevis-pkcs11-afunix-socket-unlock daemon creates AFUNIX sockets without explicitly restricting permissions or verifying client...

NetApp Trident debugging information leakage vulnerability

The NetApp Trident versions from v25.02.1 to v26.06.1 have a vulnerability involving debugging information leakage. This vulnerability stems from the exposure of sensitive information in the debug logs, which may allow attackers who are authenticated and have access to the debug logs to view LUKS...

Linux Distros Unpatched Vulnerability : CVE-2020-11932

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - It was discovered that the Subiquity installer for Ubuntu Server logged the LUKS full disk encryption password if one was entered. CVE-2020-11932 Note that Ness...

CVE-2020-11932: Insertion of Sensitive Information into Log File

It was discovered that the Subiquity installer for Ubuntu Server logged the LUKS full disk encryption password if one was entered...