CVE-2020-10277

RVD#2562: Booting from a live image leads to exfiltration of sensible information and privilege escalation

Published Jun 24, 2020 CVSS 3.1 · 6.4 Medium EPSS < 1% KEV · Not listed
Description
There is no mechanism in place to prevent a bad operator to boot from a live OS image, this can lead to extraction of sensible files (such as the shadow file) or privilege escalation by manually adding a new user with sudo privileges on the machine.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2020-2732 There is no mechanism in place to prevent a bad operator to boot from a live OS image, this can lead to extraction of sensible files (such as the shadow file) or privilege escalation by manually adding a new user with sudo privileges on the machine.
History

No history.