CVE-2024-6388

—

CVSS 3.1

5.5 medium

EPSS

<1%p4

Published

Jun 27, 2024 (Jun 27, 2024)

Modified

Jun 17, 2026

Description

Marco Trevisan discovered that the Ubuntu Advantage Desktop Daemon, before version 1.12, leaks the Pro token to unprivileged users by passing the token as an argument in plaintext.

Vendors: canonical
Products: ubuntu advantage desktop daemon
Weakness: CWE-497, CWE-319
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.1%)

In the news0 stories

No ingested article mentions this CVE yet.