9.3 Critical

CVE-2023-32550 Landscape's server-status page exposed sensitive system information

Description

Landscape's server-status page exposed sensitive system information. This data leak included GET requests which contain information to attack and leak further information from the Landscape API.

Affected products and versions

Product	Affected versions	Fixed in
Landscape 19.10	earliest → < 19.10.05	19.10.05

References

bugs.launchpad.net bugs.launchpad.net

Timeline

Published June 6, 2023
Last modified January 7, 2025

The 3 CVEs of Landscape →

CVE-2023-32551 Landscape allowed URLs which caused open redirection 6.1 Medium CVE-2023-32549 Landscape cryptographic keys were insecurely generated with a weak pseudo-random generator 6.8 Medium

Track this CVE

CVE-2023-32550 Landscape's server-status page exposed sensitive system information

Description

Affected products and versions

References

Timeline

Other CVEs of Landscape