vulnerability

Ubuntu: USN-7063-1 (CVE-2024-6388): Ubuntu Advantage Desktop Daemon vulnerability

Try Surface Command

Back to search

Severity

CVSS

(AV:L/AC:M/Au:S/C:C/I:N/A:N)

Published

Jun 27, 2024

Added

Oct 14, 2024

Modified

Apr 16, 2026

Description

Marco Trevisan discovered that the Ubuntu Advantage Desktop Daemon, before version 1.12, leaks the Pro token to unprivileged users by passing the token as an argument in plaintext.

Solutions

ubuntu-pro-upgrade-ubuntu-advantage-desktop-daemonubuntu-upgrade-ubuntu-advantage-desktop-daemon

References

CVE-2024-6388
https://attackerkb.com/topics/CVE-2024-6388
CWE-319
CWE-497
EUVD-EUVD-2024-47495
UBUNTU-USN-7063-1
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-47495

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report