CVE-2023-32550

CRITICAL

Landscape < 19.10.5 - Sensitive Information Exposure via Server-Status Page

Title source: llm
STIX 2.1

Description

Landscape's server-status page exposed sensitive system information. This data leak included GET requests which contain information to attack and leak further information from the Landscape API.

References (1)

Core 1
Core References
Issue Tracking, Mitigation, Vendor Advisory issue-tracking
https://bugs.launchpad.net/landscape/+bug/1929037

Scores

CVSS v3 9.3
EPSS 0.0045
EPSS Percentile 35.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-668 CWE-497
Status published
Products (1)
canonical/landscape < 19.10.5
Published Jun 06, 2023
Tracked Since Feb 18, 2026