Vulnerabilities > CVE-2020-10759 - Unspecified vulnerability in Redhat Enterprise Linux 7.0/8.0

047910
CVSS 6.0 - MEDIUM
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
HIGH
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
NONE
local
low complexity
redhat
NVD
Published: 2020-09-15
Updated: 2024-11-21

Summary

A PGP signature bypass flaw was found in fwupd (all versions), which could lead to the installation of unsigned firmware. As per upstream, a signature bypass is theoretically possible, but not practical because the Linux Vendor Firmware Service (LVFS) is either not implemented or enabled in versions of fwupd shipped with Red Hat Enterprise Linux 7 and 8. The highest threat from this vulnerability is to confidentiality and integrity.

Vulnerable Configurations

Part Description Count
OS
Redhat
2

References