Canonical Landscape vulnerabilities

3 known vulnerabilities affecting canonical/landscape.

Total CVEs

3

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH2MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2023-32550HIGHCVSS 8.2fixed in 19.10.52023-06-06

CVE-2023-32550 [CRITICAL] CWE-497 CVE-2023-32550: Landscape's server-status page exposed sensitive system information. This data leak included GET req Landscape's server-status page exposed sensitive system information. This data leak included GET requests which contain information to attack and leak further information from the Landscape API.

CVE-2023-32549HIGHCVSS 7.5fixed in 19.10.52023-06-06

CVE-2023-32549 [MEDIUM] CWE-338 CVE-2023-32549: Landscape cryptographic keys were insecurely generated with a weak pseudo-random generator. Landscape cryptographic keys were insecurely generated with a weak pseudo-random generator.

CVE-2023-32551MEDIUMCVSS 6.1fixed in 19.10.52023-06-06

CVE-2023-32551 [MEDIUM] CWE-601 CVE-2023-32551: Landscape allowed URLs which caused open redirection. Landscape allowed URLs which caused open redirection.