USN-7063-1: Ubuntu Advantage Desktop Daemon vulnerability
Marco Trevisan discovered that the Ubuntu Advantage Desktop Daemon leaked the Pro token to unprivileged users by passing the token as an argument in plaintext. An attacker could use this issue to gain unauthorized access to an Ubuntu Pro subscription. (CVE-2024-6388)
Affected Software
Event History
Frequently Asked Questions
What is the severity of USN-7063-1?
The severity of USN-7063-1 is classified as high due to the potential for unauthorized access to an Ubuntu Pro subscription.
How do I fix USN-7063-1?
To fix USN-7063-1, upgrade the ubuntu-advantage-desktop-daemon package to the specified remedial versions for your Ubuntu release.
Which Ubuntu versions are affected by USN-7063-1?
USN-7063-1 affects Ubuntu versions 16.04, 18.04, 20.04, 22.04, and 24.04.
What is CVE-2024-6388 related to USN-7063-1?
CVE-2024-6388 describes the vulnerability in the Ubuntu Advantage Desktop Daemon that allows leakage of the Pro token to unprivileged users.
Who discovered the vulnerability in USN-7063-1?
The vulnerability in USN-7063-1 was discovered by Marco Trevisan.