CVSS 10.0 LXD ， MicroCloud漏洞允许攻击者在没有私钥的情况下模拟受信任的客户端

Canonical的LXD和MicroCloud中的一个关键缺陷允许攻击者以受信任的客户端身份登录，而无需持有该客户端的私钥。为此，攻击者必须通过网络访问其HTTPS API

原文标题：CVSS 10.0 LXD, MicroCloud Flaw Lets Attackers Impersonate Trusted Clients Without a Private Key

信源：The Hacker News ｜ 阅读原文

A critical flaw in Canonical's LXD and MicroCloud let an attacker log in as a trusted client without holding that client's private key. To do it, the attacker had to reach their HTTPS API over the network and have the trusted client's public certificate. Once

—— 开源情报自动采集 · 网