Marco Trevisan discovered that the Ubuntu Advantage Desktop Daemon, before version 1.12, leaks the Pro token to unprivileged users by passing the token as an argument in plaintext.
References
| Link | Resource |
|---|---|
| https://bugs.launchpad.net/ubuntu/+source/ubuntu-advantage-tools/+bug/2068944 | Issue Tracking |
| https://github.com/canonical/ubuntu-advantage-desktop-daemon/pull/24 | Issue Tracking Patch |
| https://www.cve.org/CVERecord?id=CVE-2024-6388 | Third Party Advisory |
| https://bugs.launchpad.net/ubuntu/+source/ubuntu-advantage-tools/+bug/2068944 | Issue Tracking |
| https://github.com/canonical/ubuntu-advantage-desktop-daemon/pull/24 | Issue Tracking Patch |
| https://www.cve.org/CVERecord?id=CVE-2024-6388 | Third Party Advisory |
Configurations
History
27 Aug 2025, 16:18
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:canonical:ubuntu_advantage_desktop_daemon:*:*:*:*:*:*:*:* | |
| CWE | CWE-319 | |
| References | () https://bugs.launchpad.net/ubuntu/+source/ubuntu-advantage-tools/+bug/2068944 - Issue Tracking | |
| References | () https://github.com/canonical/ubuntu-advantage-desktop-daemon/pull/24 - Issue Tracking, Patch | |
| References | () https://www.cve.org/CVERecord?id=CVE-2024-6388 - Third Party Advisory | |
| First Time |
Canonical ubuntu Advantage Desktop Daemon
Canonical |
21 Nov 2024, 09:49
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://bugs.launchpad.net/ubuntu/+source/ubuntu-advantage-tools/+bug/2068944 - | |
| References | () https://github.com/canonical/ubuntu-advantage-desktop-daemon/pull/24 - | |
| References | () https://www.cve.org/CVERecord?id=CVE-2024-6388 - |
27 Jun 2024, 17:11
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-06-27 16:15
Updated : 2025-08-27 16:18
NVD link : CVE-2024-6388
Mitre link : CVE-2024-6388
CVE.ORG link : CVE-2024-6388
JSON object : View
Products Affected
canonical
- ubuntu_advantage_desktop_daemon