Логотип exploitDog
bind:CVE-2026-3351
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2026-3351

Количество 4

Количество 4

ubuntu логотип

CVE-2026-3351

26 дней назад

Improper authorization in the API endpoint GET /1.0/certificates in Canonical LXD 6.6 on Linux allows an authenticated, restricted user to enumerate all certificate fingerprints trusted by the lxd server.

CVSS3: 4.3
EPSS: Низкий
nvd логотип

CVE-2026-3351

26 дней назад

Improper authorization in the API endpoint GET /1.0/certificates in Canonical LXD 6.6 on Linux allows an authenticated, restricted user to enumerate all certificate fingerprints trusted by the lxd server.

CVSS3: 4.3
EPSS: Низкий
debian логотип

CVE-2026-3351

26 дней назад

Improper authorization in the API endpoint GET /1.0/certificates in Ca ...

CVSS3: 4.3
EPSS: Низкий
github логотип

GHSA-crmg-9m86-636r

25 дней назад

lxd's non-recursive certificate listing bypasses per-object authorization and leaks all fingerprints

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2026-3351

Improper authorization in the API endpoint GET /1.0/certificates in Canonical LXD 6.6 on Linux allows an authenticated, restricted user to enumerate all certificate fingerprints trusted by the lxd server.

CVSS3: 4.3
0%
Низкий
26 дней назад
nvd логотип
CVE-2026-3351

Improper authorization in the API endpoint GET /1.0/certificates in Canonical LXD 6.6 on Linux allows an authenticated, restricted user to enumerate all certificate fingerprints trusted by the lxd server.

CVSS3: 4.3
0%
Низкий
26 дней назад
debian логотип
CVE-2026-3351

Improper authorization in the API endpoint GET /1.0/certificates in Ca ...

CVSS3: 4.3
0%
Низкий
26 дней назад
github логотип
GHSA-crmg-9m86-636r

lxd's non-recursive certificate listing bypasses per-object authorization and leaks all fingerprints

0%
Низкий
25 дней назад

Уязвимостей на страницу