critical9.6
CVE-2024-6107
Due to insufficient verification, an attacker could use a malicious client to bypass authentication checks and run RPC commands in a region.
Impact
Due to insufficient verification, an attacker could use a malicious client to bypass authentication checks and run RPC commands in a region. This has been addressed in MAAS and updated in the corresponding snaps.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Canonical | Metal As A Service | from 3.1.0 before 3.1.4 from 3.2.0 before 3.2.11 from 3.3.0 before 3.3.8 from 3.4.0 before 3.4.4 Version 3.5.0 |