CVE-2023-32550

Landscape's server-status page exposed sensitive system information. This data leak included GET requests which contain information to attack and leak further information from the Landscape API.

Score

CVSS 3.1 9.3 Critical

Status

Modified - security@ubuntu.com

Published

2023-06-06

Last modified

2025-01-07

Weaknesses

CWE-497, CWE-668

Affected products

• Landscape (Canonical)
• Landscape (Canonical Ltd.)

References

• https://bugs.launchpad.net/landscape/+bug/1929037