CVE-2024-6388

MEDIUM 5.5CVE-2024-6388 · Published 27/06/2024 · updated 17/06/2026

In short

CVE-2024-6388 is a MEDIUM (CVSS 5.5) vulnerability affecting ubuntu advantage desktop daemon (canonical).
Chance of exploitation in the next 30 days (EPSS): 0.15%, higher than 3.9% of all vulnerabilities.
Fix: update to 1.12 or later.

Package	Affected versions	Patched versions
ubuntu advantage desktop daemon canonical	`< 1.12`	`1.12`

Description

Marco Trevisan discovered that the Ubuntu Advantage Desktop Daemon, before version 1.12, leaks the Pro token to unprivileged users by passing the token as an argument in plaintext.

References

bugs.launchpad.net/ubuntu/+source/ubuntu-advantage-tools/+bug/2068944 · Issue Tracking
canonical/ubuntu-advantage-desktop-daemon#24 · Issue Tracking
cve.org/CVERecord · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free