CVE-2023-32550 — Landscape's Apache server-status is accessible by default

CVE-2023-32550

Landscape's Apache server-status is accessible by default PUBLISHED

Description (CNA)

Landscape's server-status page exposed sensitive system information. This data leak included GET requests which contain information to attack and leak further information from the Landscape API.

Affected (CNA)

Vendor / product	Versions
Canonical Ltd. / Landscape	affected 0 before 19.10.05

CWE

CWE-497

References

https://bugs.launchpad.net/landscape/+bug/1929037

ADP enrichment

CVE

No English description supplied.

https://bugs.launchpad.net/landscape/+bug/1929037

CISA-ADP

No English description supplied.

No references supplied.