6.7
Moyenne
CVE-2023-48733 An insecure default to allow UEFI Shell in EDK2 was left enabled in Ubuntu's EDK2
Description
An insecure default to allow UEFI Shell in EDK2 was left enabled in Ubuntu's EDK2. This allows an OS-resident attacker to bypass Secure Boot.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Ubuntu EDK II 2023.05 | premières → < 2023.05-2ubuntu0.1 | 2023.05-2ubuntu0.1 |