Описание
Privilege Escalation in operations API in Canonical LXD <6.5 on multiple platforms allows attacker with read permissions to hijack terminal or console sessions and execute arbitrary commands via WebSocket connection hijacking format
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-apps/focal | needs-triage | |
| esm-infra/bionic | needs-triage | |
| esm-infra/xenial | needs-triage | |
| jammy | DNE | |
| noble | DNE | |
| plucky | DNE | |
| questing | DNE | |
| upstream | needs-triage |
Показывать по
10
EPSS
Процентиль: 13%
0.00042
Низкий
8.1 High
CVSS3
Связанные уязвимости
CVSS3: 8.1
nvd
4 месяца назад
Privilege Escalation in operations API in Canonical LXD <6.5 on multiple platforms allows attacker with read permissions to hijack terminal or console sessions and execute arbitrary commands via WebSocket connection hijacking format
CVSS3: 8.1
debian
4 месяца назад
Privilege Escalation in operations API in Canonical LXD <6.5 on multip ...
CVSS3: 6.8
github
4 месяца назад
Canonical LXD Vulnerable to Privilege Escalation via WebSocket Connection Hijacking in Operations API
EPSS
Процентиль: 13%
0.00042
Низкий
8.1 High
CVSS3