漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
Fedora CoreOS supports setting a GRUB bootloader password using a Butane config. When this feature is enabled, GRUB requires a password to access the GRUB command-line, modify kernel command-line arguments, or boot non-default OSTree deployments. Recent Fedora CoreOS releases have a misconfiguration which allows booting non-default OSTree deployments without entering a password. This allows someone with access to the GRUB menu to boot into an older version of Fedora CoreOS, reverting any security fixes that have recently been applied to the machine. A password is still required to modify kernel command-line arguments and to access the GRUB command line.
CVSS Information
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N
Vulnerability Type
输入验证不恰当
Vulnerability Title
Fedora 访问控制错误漏洞
Vulnerability Description
Fedora是Fedora社区的一套Linux操作系统。 Fedora CoreOS存在安全漏洞，该漏洞源于其允许引导非默认的OSTree部署而不需要输入密码。这允许访问GRUB菜单的用户引导到较老版本的Fedora CoreOS，恢复最近应用到机器上的任何安全修复程序。
CVSS Information
N/A
Vulnerability Type
N/A