Lucene search
K

8 matches found

OSV
OSV
added 2024/10/11 4:51 p.m.1 views

USN-7063-1 ubuntu-advantage-desktop-daemon vulnerability

Marco Trevisan discovered that the Ubuntu Advantage Desktop Daemon leaked the Pro token to unprivileged users by passing the token as an argument in plaintext. An attacker could use this issue to gain unauthorized access to an Ubuntu Pro subscription. CVE-2024-6388...

5.9CVSS5.8AI score0.00022EPSS
Exploits0References2
NVD
NVD
added 2024/06/27 4:15 p.m.14 views

CVE-2024-6388

Marco Trevisan discovered that the Ubuntu Advantage Desktop Daemon, before version 1.12, leaks the Pro token to unprivileged users by passing the token as an argument in plaintext...

5.9CVSS0.00022EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2024/06/27 3:39 p.m.11 views

CVE-2024-6388

Marco Trevisan discovered that the Ubuntu Advantage Desktop Daemon, before version 1.12, leaks the Pro token to unprivileged users by passing the token as an argument in plaintext...

5.9CVSS7.1AI score0.00022EPSS
Exploits0References3
CVE
CVE
added 2024/06/27 3:39 p.m.56 views

CVE-2024-6388

CVE-2024-6388 affects the Ubuntu Advantage Desktop Daemon before version 1.12. The issue is that the Pro token is leaked to unprivileged users by being passed as a plaintext argument, which could enable an attacker to gain unauthorized access to an Ubuntu Pro subscription. The vulnerability is do...

5.9CVSS6.9AI score0.00022EPSS
Exploits0References3Affected Software1
UbuntuCve
UbuntuCve
added 2024/06/27 12:0 a.m.17 views

CVE-2024-6388

Marco Trevisan discovered that the Ubuntu Advantage Desktop Daemon, before version 1.12, leaks the Pro token to unprivileged users by passing the token as an argument in plaintext...

5.9CVSS5.8AI score0.00022EPSS
Exploits0References3
OSV
OSV
added 2024/06/27 12:0 a.m.0 views

UBUNTU-CVE-2024-6388

Marco Trevisan discovered that the Ubuntu Advantage Desktop Daemon, before version 1.12, leaks the Pro token to unprivileged users by passing the token as an argument in plaintext...

5.9CVSS5.8AI score0.00022EPSS
Exploits0References4
NVD
NVD
added 2007/05/18 10:30 p.m.18 views

CVE-2007-2766

lib/backup-methods.sh in Backup Manager before 0.7.6 provides the MySQL password as a plaintext command line argument, which allows local users to obtain this password by listing the process and its arguments, related to lib/backup-methods.sh...

7.2CVSS6.2AI score0.00056EPSS
Exploits0References6
Cvelist
Cvelist
added 2007/05/18 10:0 p.m.17 views

CVE-2007-2766

lib/backup-methods.sh in Backup Manager before 0.7.6 provides the MySQL password as a plaintext command line argument, which allows local users to obtain this password by listing the process and its arguments, related to lib/backup-methods.sh...

6.1AI score0.00056EPSS
Exploits0References6
Rows per page
Query Builder