CVE-2024-6388 - Vulnerability Details - OpenCVE

Marco Trevisan discovered that the Ubuntu Advantage Desktop Daemon, before version 1.12, leaks the Pro token to unprivileged users by passing the token as an argument in plaintext.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Changed

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

No data.

No data.

No data.

References

Link	Providers
https://bugs.launchpad.net/ubuntu/+source/ubuntu-advantage-tools/+bug/2068944
https://github.com/canonical/ubuntu-advantage-desktop-daemon/pull/24
https://www.cve.org/CVERecord?id=CVE-2024-6388

History

No history.

MITRE

Status: PUBLISHED

Assigner: canonical

Published: 2024-06-27T15:39:04.168Z

Updated: 2024-08-01T21:41:03.306Z

Reserved: 2024-06-27T14:21:13.801Z

Link: CVE-2024-6388

Vulnrichment

Updated: 2024-08-01T21:41:03.306Z

NVD

Status : Awaiting Analysis

Published: 2024-06-27T16:15:12.110

Modified: 2024-11-21T09:49:33.430

Link: CVE-2024-6388

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-6388", "assignerOrgId": "cc1ad9ee-3454-478d-9317-d3e869d708bc", "state": "PUBLISHED", "assignerShortName": "canonical", "dateReserved": "2024-06-27T14:21:13.801Z", "datePublished": "2024-06-27T15:39:04.168Z", "dateUpdated": "2024-08-01T21:41:03.306Z"}, "containers": {"cna": {"affected": [{"packageName": "ubuntu-advantage-desktop-daemon", "product": "Ubuntu Advantage Desktop Pro", "vendor": "Canonical Ltd.", "repo": "https://github.com/canonical/ubuntu-advantage-desktop-daemon", "platforms": ["Linux"], "versions": [{"lessThan": "1.12", "status": "affected", "version": "0", "versionType": "semver"}]}], "descriptions": [{"lang": "en", "value": "Marco Trevisan discovered that the Ubuntu Advantage Desktop Daemon, before version 1.12, leaks the Pro token to unprivileged users by passing the token as an argument in plaintext."}], "problemTypes": [{"descriptions": [{"cweId": "CWE-497", "description": "CWE-497", "lang": "en", "type": "CWE"}]}], "references": [{"tags": ["issue-tracking"], "url": "https://bugs.launchpad.net/ubuntu/+source/ubuntu-advantage-tools/+bug/2068944"}, {"tags": ["issue-tracking"], "url": "https://www.cve.org/CVERecord?id=CVE-2024-6388"}, {"tags": ["issue-tracking"], "url": "https://github.com/canonical/ubuntu-advantage-desktop-daemon/pull/24"}], "credits": [{"lang": "en", "type": "finder", "value": "Marco Trevisan"}], "metrics": [{"format": "CVSS", "cvssV3_1": {"version": "3.1", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "REQUIRED", "scope": "CHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N", "baseScore": 5.9, "baseSeverity": "MEDIUM"}}], "providerMetadata": {"orgId": "cc1ad9ee-3454-478d-9317-d3e869d708bc", "shortName": "canonical", "dateUpdated": "2024-06-27T15:39:04.168Z"}}, "adp": [{"affected": [{"vendor": "canonical", "product": "ubuntu_advantage_desktop_pro", "cpes": ["cpe:2.3:o:canonical:ubuntu_advantage_desktop_pro:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThan": "1.12", "versionType": "semver"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-07-05T18:48:51.687477Z", "id": "CVE-2024-6388", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-07-08T18:25:45.968Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T21:41:03.306Z"}, "title": "CVE Program Container", "references": [{"tags": ["issue-tracking", "x_transferred"], "url": "https://bugs.launchpad.net/ubuntu/+source/ubuntu-advantage-tools/+bug/2068944"}, {"tags": ["issue-tracking", "x_transferred"], "url": "https://www.cve.org/CVERecord?id=CVE-2024-6388"}, {"tags": ["issue-tracking", "x_transferred"], "url": "https://github.com/canonical/ubuntu-advantage-desktop-daemon/pull/24"}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://bugs.launchpad.net/ubuntu/+source/ubuntu-advantage-tools/+bug/2068944", "tags": ["issue-tracking", "x_transferred"]}, {"url": "https://www.cve.org/CVERecord?id=CVE-2024-6388", "tags": ["issue-tracking", "x_transferred"]}, {"url": "https://github.com/canonical/ubuntu-advantage-desktop-daemon/pull/24", "tags": ["issue-tracking", "x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T21:41:03.306Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-6388", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-07-05T18:48:51.687477Z"}}}], "affected": [{"cpes": ["cpe:2.3:o:canonical:ubuntu_advantage_desktop_pro:*:*:*:*:*:*:*:*"], "vendor": "canonical", "product": "ubuntu_advantage_desktop_pro", "versions": [{"status": "affected", "version": "0", "lessThan": "1.12", "versionType": "semver"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-07-05T19:05:28.534Z"}}], "cna": {"credits": [{"lang": "en", "type": "finder", "value": "Marco Trevisan"}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 5.9, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}}], "affected": [{"repo": "https://github.com/canonical/ubuntu-advantage-desktop-daemon", "vendor": "Canonical Ltd.", "product": "Ubuntu Advantage Desktop Pro", "versions": [{"status": "affected", "version": "0", "lessThan": "1.12", "versionType": "semver"}], "platforms": ["Linux"], "packageName": "ubuntu-advantage-desktop-daemon"}], "references": [{"url": "https://bugs.launchpad.net/ubuntu/+source/ubuntu-advantage-tools/+bug/2068944", "tags": ["issue-tracking"]}, {"url": "https://www.cve.org/CVERecord?id=CVE-2024-6388", "tags": ["issue-tracking"]}, {"url": "https://github.com/canonical/ubuntu-advantage-desktop-daemon/pull/24", "tags": ["issue-tracking"]}], "descriptions": [{"lang": "en", "value": "Marco Trevisan discovered that the Ubuntu Advantage Desktop Daemon, before version 1.12, leaks the Pro token to unprivileged users by passing the token as an argument in plaintext."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-497", "description": "CWE-497"}]}], "providerMetadata": {"orgId": "cc1ad9ee-3454-478d-9317-d3e869d708bc", "shortName": "canonical", "dateUpdated": "2024-06-27T15:39:04.168Z"}}}, "cveMetadata": {"cveId": "CVE-2024-6388", "state": "PUBLISHED", "dateUpdated": "2024-08-01T21:41:03.306Z", "dateReserved": "2024-06-27T14:21:13.801Z", "assignerOrgId": "cc1ad9ee-3454-478d-9317-d3e869d708bc", "datePublished": "2024-06-27T15:39:04.168Z", "assignerShortName": "canonical"}, "dataVersion": "5.1"}