<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Wed, 30 Sep 2026 14:15:24 +0000</lastBuildDate>
    <item>
      <title>CVE-2024-6388</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2024-6388</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Canonical Ltd. Ubuntu Advantage Desktop Pro, canonical ubuntu_advantage_desktop_pro&lt;/p&gt;
&lt;p&gt;Marco Trevisan discovered that the Ubuntu Advantage Desktop Daemon, before version 1.12, leaks the Pro token to unprivileged users by passing the token as an argument in plaintext.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Canonical Ltd. Ubuntu Advantage Desktop Pro, canonical ubuntu_advantage_desktop_pro&lt;/p&gt;
&lt;p&gt;Marco Trevisan discovered that the Ubuntu Advantage Desktop Daemon, before version 1.12, leaks the Pro token to unprivileged users by passing the token as an argument in plaintext.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2024-6388</guid>
    </item>
    <item>
      <title>USN-7063-1 — ubuntu-advantage-desktop-daemon vulnerability</title>
      <link>https://vulnerability.circl.lu/vuln/usn-7063-1</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Ubuntu:Pro:16.04:LTS: ubuntu-advantage-desktop-daemon, Ubuntu:Pro:18.04:LTS: ubuntu-advantage-desktop-daemon, Ubuntu:20.04:LTS: ubuntu-advantage-desktop-daemon, Ubuntu:22.04:LTS: ubuntu-advantage-desktop-daemon, Ubuntu:24.04:LTS: ubuntu-advantage-desktop-daemon&lt;/p&gt;
&lt;p&gt;Marco Trevisan discovered that the Ubuntu Advantage Desktop Daemon leaked
the Pro token to unprivileged users by passing the token as an argument
in plaintext. An attacker could use this issue to gain unauthorized access
to an Ubuntu Pro subscription. (CVE-2024-6388)&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Ubuntu:Pro:16.04:LTS: ubuntu-advantage-desktop-daemon, Ubuntu:Pro:18.04:LTS: ubuntu-advantage-desktop-daemon, Ubuntu:20.04:LTS: ubuntu-advantage-desktop-daemon, Ubuntu:22.04:LTS: ubuntu-advantage-desktop-daemon, Ubuntu:24.04:LTS: ubuntu-advantage-desktop-daemon&lt;/p&gt;
&lt;p&gt;Marco Trevisan discovered that the Ubuntu Advantage Desktop Daemon leaked
the Pro token to unprivileged users by passing the token as an argument
in plaintext. An attacker could use this issue to gain unauthorized access
to an Ubuntu Pro subscription. (CVE-2024-6388)&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/usn-7063-1</guid>
    </item>
  </channel>
</rss>
