LXD aur MicroCloud me critical flaw, attacker bina private key ke trusted client ban sakta hai
Yahan publish hua 1 Nov, 8:29 pm IST · Source ki tareekh 1 Nov, 2:21 pm IST
Source label batata hai khabar kahan se aayi, independent verification nahi. Reading guide
Canonical ke LXD aur MicroCloud me ek serious bug hai jisse attacker HTTPS API pe public certificate se login karke cluster aur VM control kar sakta hai.
Aapko kya karna haiAffected admins ko turant certificate aur access controls check karne chahiye.
Updates aur sources (1)
Har update ka asli source neeche hai. Multiple links independent verification ka proof nahi hain.
- Flaw ka detailed description outlet ke snippet me diya gaya hai.CVSS 10.0 LXD, MicroCloud Flaw Lets Attackers Impersonate Trusted Clients Without a Private Key ↗
Aapki raay