Launchpad.net

CVE 2020-11932

It was discovered that the Subiquity installer for Ubuntu Server logged the LUKS full disk encryption password if one was entered.

CVE-2020-11932 (Candidate) is related to these bugs:

Bug #1878115: logged luks passwords

Summary				In	Importance	Status
	1878115	logged luks passwords		curtin (Ubuntu)	Undecided	Invalid
	1878115	logged luks passwords		subiquity (Ubuntu)	Critical	Fix Released

See the

CVE page on Mitre.org for more details.