Описание
Information disclosure in images API in Canonical LXD before 6.5 and 5.21.4 on all platforms allows unauthenticated remote attackers to determine project existence via differing HTTP status code responses.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| incus | fixed | 6.0.5-1 | package | |
| lxd | removed | package | ||
| lxd | ignored | trixie | package | |
| lxd | end-of-life | bookworm | package |
Примечания
https://github.com/canonical/lxd/security/advisories/GHSA-xch9-h8qw-85c7
EPSS
Связанные уязвимости
Information disclosure in images API in Canonical LXD before 6.5 and 5.21.4 on all platforms allows unauthenticated remote attackers to determine project existence via differing HTTP status code responses.
Information disclosure in images API in Canonical LXD before 6.5 and 5.21.4 on all platforms allows unauthenticated remote attackers to determine project existence via differing HTTP status code responses.
Canonical LXD Project Existence Determination Through Error Handling in Image Get Function
EPSS