•SiTech AI Team
CVSS 10.0 Flaw in LXD and MicroCloud Lets Attackers Impersonate Trusted Clients
Canonical has fixed a CVSS 10.0 flaw in LXD and MicroCloud that lets an attacker log in as a trusted client without that client's private key, given network access to the HTTPS API and the client's public certificate.