VDB
CVE-2024-6388
CVE-2024-6388
PUBLISHED
CVSS 5.900000095367432 MEDIUM
Marco Trevisan discovered that the Ubuntu Advantage Desktop Daemon, before version 1.12, leaks the Pro token to unprivileged users by passing the token as an argument in plaintext.
EPSS 0.15% · 4.2th percentile
Risk Scores
CVSS 3.1
5.900000095367432
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N
EPSS Score
0.15%
4.2th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| canonical | ubuntu_advantage_desktop_pro | 0 |
| canonical | ubuntu_advantage_desktop_daemon | 0 |
| Canonical Ltd. | Ubuntu Advantage Desktop Pro | 0 |
Timeline
- Jun 27, 2024 CVE Published
- Jun 28, 2024 EPSS Score
- Jul 20, 2024 EPSS Score
- Aug 1, 2024 CVE Updated
- Aug 12, 2024 EPSS Score
- Sep 3, 2024 EPSS Score
- Sep 26, 2024 EPSS Score
- Oct 5, 2024 Coalition ESS Score
- Oct 18, 2024 EPSS Score
- Nov 10, 2024 EPSS Score
- Dec 3, 2024 EPSS Score
- Dec 26, 2024 EPSS Score