CVE-2023-48733
Assigner: canonical
Published: 2024-02-14T21:54:08.333Z
State: PUBLISHED
affected: packageName: edk2
product: Ubuntu EDK II
vendor: Canonical Ltd.
platforms: Linux
versions: lessThan: 2023.05-2ubuntu0.1
status: affected
version: 0
versionType: semver
descriptions: value: An insecure default to allow UEFI Shell in EDK2 was left enabled in Ubuntu's EDK2. This allows an OS-resident attacker to bypass Secure Boot.
credits: type: finder
value: Mate Kukri
metrics: format: CVSS
cvssV3_1: version: 3.1
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: HIGH
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
vectorString: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
baseScore: 6.7
baseSeverity: MEDIUM