Canonical Ltd Landscape vulnerabilities
3 known vulnerabilities affecting canonical_ltd/landscape.
Total CVEs
3
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH2MEDIUM1
Vulnerabilities
Page 1 of 1
CVE-2023-32550P3HIGHCVSS 8.2fixed in 19.10.052023-06-06
CVE-2023-32550 [HIGH] CWE-497 CVE-2023-32550: Landscape's server-status page exposed sensitive system information. This data leak included GET req
Landscape's server-status page exposed sensitive system information. This data leak included GET requests which contain information to attack and leak further information from the Landscape API.
nvd
CVE-2023-32549P3HIGHCVSS 7.5fixed in 19.10.052023-06-06
CVE-2023-32549 [HIGH] CWE-338 CVE-2023-32549: Landscape cryptographic keys were insecurely generated with a weak pseudo-random generator.
Landscape cryptographic keys were insecurely generated with a weak pseudo-random generator.
nvd
CVE-2023-32551P4MEDIUMCVSS 6.1fixed in 19.10.052023-06-06
CVE-2023-32551 [MEDIUM] CWE-601 CVE-2023-32551: Landscape allowed URLs which caused open redirection.
Landscape allowed URLs which caused open redirection.
nvd