Skip to content
fr Sign in
9.6 Critical

CVE-2024-6107 Due to insufficient verification, an attacker could use a malicious client to bypass authentication checks and run RPC…

Description

Due to insufficient verification, an attacker could use a malicious client to bypass authentication checks and run RPC commands in a region. This has been addressed in MAAS and updated in the corresponding snaps.

Affected products and versions

Product Affected versions Fixed in
MAAS 3.5 3.5.0 → < 3.5.1 3.5.1
MAAS 3.4 3.4.0 → < 3.4.4 3.4.4
MAAS 3.3 3.3.0 → < 3.3.8 3.3.8
MAAS 3.2 3.2.0 → < 3.2.11 3.2.11
MAAS 3.1 3.1.0 → < 3.1.4 3.1.4

References

Timeline

  1. Published
  2. Last modified

Other CVEs of MAAS

The 2 CVEs of MAAS →
CVE-2026-12392 An information exposure vulnerability in Canonical MAAS prior to versions 3.4.10, 3.5.14, 3.6.5, 3.7.3, and 3.8.0 allows… 5.3 Medium
Track this CVE