VULNERABILITY INTELLIGENCE

CVE-2024-6388

CVSS score5.9 MEDIUM
EPSS probability0.15%
CISA KEVNot currently listed
Published2024-06-27
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N

Description

Marco Trevisan discovered that the Ubuntu Advantage Desktop Daemon, before version 1.12, leaks the Pro token to unprivileged users by passing the token as an argument in plaintext.

Weakness classification

  • security@ubuntu.com: CWE-497
  • nvd@nist.gov: CWE-319

Primary references