Certificate Validation Flaw in LXD and Incus Allows Unauthenticated Host Control
The flaw lets attackers impersonate trusted certificates during TLS handshakes to bypass authentication in LXD and Incus clusters.
Stories per day · 30 days
2 RSS
2 stories, newest first · one card per story
Stories tagged #unauthenticated-access
NASA Ground Control Software Flaw Enables Unauthenticated Commands
Critical flaws in NASA's AIT-GUI ground control software let unauthenticated attackers send spacecraft commands and execute scripts.