6.7
Medium
CVE-2023-48733 An insecure default to allow UEFI Shell in EDK2 was left enabled in Ubuntu's EDK2
Description
An insecure default to allow UEFI Shell in EDK2 was left enabled in Ubuntu's EDK2. This allows an OS-resident attacker to bypass Secure Boot.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Ubuntu EDK II 2023.05 | earliest → < 2023.05-2ubuntu0.1 | 2023.05-2ubuntu0.1 |