Nixpkgs Security Tracker

Login with GitHub

Suggestion detail

Dismissed
updated 2 weeks, 5 days ago by @LeSuisse Activity log
  • Created automatic suggestion
  • @LeSuisse removed
    9 packages
    • lxd-ui
    • lxd-lts
    • lxd-image-server
    • lxd-unwrapped-lts
    • python312Packages.pylxd
    • python313Packages.pylxd
    • python314Packages.pylxd
    • terraform-providers.lxd
    • terraform-providers.terraform-lxd_lxd
  • @LeSuisse dismissed
Authorization Bypass in LXD GET /1.0/certificates Endpoint

Improper authorization in the API endpoint GET /1.0/certificates in Canonical LXD 6.6 on Linux allows an authenticated, restricted user to enumerate all certificate fingerprints trusted by the lxd server.

Affected products

lxd
  • ==6.6
Ignored packages (9)

pkgs.lxd-ui

Web user interface for LXD

pkgs.lxd-lts

Daemon based on liblxc offering a REST API to manage containers

pkgs.lxd-unwrapped-lts

Daemon based on liblxc offering a REST API to manage containers

Not present in nixpkgs