CVE-2024-6388 | THREATINT

Assigner	canonical
Reserved	2024-06-27
Published	2024-06-27
Updated	2024-08-01

Description

Marco Trevisan discovered that the Ubuntu Advantage Desktop Daemon, before version 1.12, leaks the Pro token to unprivileged users by passing the token as an argument in plaintext.

MEDIUM: 5.9

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N

Problem types

CWE-497

Product status

Any version before 1.12

affected

Credits

Marco Trevisan 0x400a916900

References

https://bugs.launchpad.net/ubuntu/+source/ubuntu-advantage-tools/+bug/2068944 issue-tracking

https://www.cve.org/CVERecord?id=CVE-2024-6388 issue-tracking

https://github.com/canonical/ubuntu-advantage-desktop-daemon/pull/24 issue-tracking

cve.org CVE-2024-6388

nvd.nist.gov CVE-2024-6388

Download JSON

https://cve.threatint.com

Subscribe to our newsletter to learn more about our work.