Relax-and-Recover (aka ReaR) through 2.7 creates a world-readable initrd when using GRUB_RESCUE=y. This allows local attackers to gain access to system secrets otherwise only readable by root.
CVSS
No CVSS.
References
Configurations
No configuration.
Information
Published : 2024-01-12 23:15
Updated : 2024-01-12 23:15
NVD link : CVE-2024-23301
Mitre link : CVE-2024-23301
JSON object : View
Products Affected
No product.
CWE
No CWE.
