CERT24CVSS 10.0: LXD and MicroCloud flaw lets attackers impersonate trusted clients without a private keyLoading data…
CERT24Threat Observatory
Period

CVSS 10.0: LXD and MicroCloud flaw lets attackers impersonate trusted clients without a private key

A critical flaw in Canonical's LXD and MicroCloud allowed an attacker to log in as a trusted client without possessing that client's private key. The attack required network access to the HTTPS API and the public certificate of a client already trusted by the server.

← Back to intelligence

CVSS 10.0: LXD and MicroCloud flaw lets attackers impersonate trusted clients without a private key

A critical flaw in Canonical's LXD and MicroCloud allowed an attacker to log in as a trusted client without possessing that client's private key. The attack required network access to the HTTPS API and the public certificate of a client already trusted by the server.