https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-30T14:15:25.184995+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2024-6388 CVE-2024-6388 2026-09-30T14:15:25.733510+00:00

Affected: Canonical Ltd. Ubuntu Advantage Desktop Pro, canonical ubuntu_advantage_desktop_pro

Marco Trevisan discovered that the Ubuntu Advantage Desktop Daemon, before version 1.12, leaks the Pro token to unprivileged users by passing the token as an argument in plaintext.

 https://vulnerability.circl.lu/vuln/usn-7063-1 USN-7063-1 — ubuntu-advantage-desktop-daemon vulnerability 2026-09-30T14:15:25.733638+00:00

Affected: Ubuntu:Pro:16.04:LTS: ubuntu-advantage-desktop-daemon, Ubuntu:Pro:18.04:LTS: ubuntu-advantage-desktop-daemon, Ubuntu:20.04:LTS: ubuntu-advantage-desktop-daemon, Ubuntu:22.04:LTS: ubuntu-advantage-desktop-daemon, Ubuntu:24.04:LTS: ubuntu-advantage-desktop-daemon

Marco Trevisan discovered that the Ubuntu Advantage Desktop Daemon leaked the Pro token to unprivileged users by passing the token as an argument in plaintext. An attacker could use this issue to gain unauthorized access to an Ubuntu Pro subscription. (CVE-2024-6388)