Aller au contenu
en Se connecter
3.8 Faible

CVE-2024-6156 Mark Laing discovered that LXD's PKI mode, until version 5.21.2, could be bypassed if the client's certificate was…

Description

Mark Laing discovered that LXD's PKI mode, until version 5.21.2, could be bypassed if the client's certificate was present in the trust store.

Produits et versions touchés

Produit Versions touchées Corrigé en
LXD 4.0 4.0 → < 6.1 4.0.10
LXD 5.21 premières → < 5.21.2 5.21.2

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de LXD

Les 3 CVE de LXD →
CVE-2024-6219 Mark Laing discovered in LXD's PKI mode, until version 5.21.1, that a restricted certificate could be added to the trust… 3.8 Faible CVE-2023-49721 An insecure default to allow UEFI Shell in EDK2 was left enabled in LXD 6.7 Moyenne
Suivre cette CVE