Skip to content
CVE PROGRAM SOURCE RECORD9.6 Critical

CVE-2024-6107

Due to insufficient verification, an attacker could use a malicious client to bypass authentication checks and run RPC commands in a region. This has been addressed in MAAS and upd

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
canonical

Description

Due to insufficient verification, an attacker could use a malicious client to bypass authentication checks and run RPC commands in a region. This has been addressed in MAAS and updated in the corresponding snaps.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Canonical MAAS

Default version status: affected

  • 3.1.0 to < 3.1.4affected
  • 3.2.0 to < 3.2.11affected
  • 3.3.0 to < 3.3.8affected
  • 3.4.0 to < 3.4.4affected
  • 3.5.0 to < 3.5.1affected

References