Skip to content
fr Sign in
3.8 Low

CVE-2024-6156 Mark Laing discovered that LXD's PKI mode, until version 5.21.2, could be bypassed if the client's certificate was…

Description

Mark Laing discovered that LXD's PKI mode, until version 5.21.2, could be bypassed if the client's certificate was present in the trust store.

Affected products and versions

Product Affected versions Fixed in
LXD 4.0 4.0 → < 6.1 4.0.10
LXD 5.21 earliest → < 5.21.2 5.21.2

References

Timeline

  1. Published
  2. Last modified

Other CVEs of LXD

The 3 CVEs of LXD →
CVE-2024-6219 Mark Laing discovered in LXD's PKI mode, until version 5.21.1, that a restricted certificate could be added to the trust… 3.8 Low CVE-2023-49721 An insecure default to allow UEFI Shell in EDK2 was left enabled in LXD 6.7 Medium
Track this CVE