CVE-2024-6107

Canonical / MAAS PUBLISHED

Description (CNA)

Due to insufficient verification, an attacker could use a malicious client to bypass authentication checks and run RPC commands in a region. This has been addressed in MAAS and updated in the corresponding snaps.

Affected (CNA)

Vendor / product	Versions
Canonical / MAAS	affected 3.1.0 before 3.1.4; affected 3.2.0 before 3.2.11; affected 3.3.0 before 3.3.8; affected 3.4.0 before 3.4.4; affected 3.5.0 before 3.5.1

CWE

CWE-287

References

https://bugs.launchpad.net/maas/+bug/2069094

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.