A critical flaw in Canonical's LXD and MicroCloud let an attacker log in as a trusted client without holding that client's private key. To do it, the attacker had to reach their HTTPS API over the network and have the trusted client's public certificate. Once in, the attacker would act as that client, with access to the cluster and its virtual machines. If the impersonated account is
A critical flaw in Canonical's LXD and MicroCloud let an attacker log in as a trusted client without holding that client's private key. To do it, the attacker had to reach their HTTPS API over the network and have the trusted client's public certificate. Once in, the attacker would act as that client, with access to the cluster and its virtual machines. If the impersonated account is
Siber Suç
CVSS 10.0 LXD, MicroCloud Flaw Lets Attackers Impersonate Trusted Clients Without a Private Key
Original Source
This news was automatically aggregated from The Hacker News.
Related News
Security Affairs newsletter Round 602 by Pierluigi Paganini – INTERNATIONAL EDITION
1 gün önce
SMS of Death: Android under attack, an invisible SMS can block calls and emergency services
1 gün önce
Week in review: Binance hit by $6.3 billion theft, impact of Brotli vulnerability
1 gün önce
📰
University of New Mexico Hospital Systems Restored After Ransomware Attack
1 gün önce