Canonical Anbox Cloud vulnerabilities

1 vulnerability

Known vulnerabilities in Canonical Anbox Cloud, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.5CVE-2024-8287canonical ltd.anbox cloud+1
EPSS score
0.18%
Anbox Management Service, in versions 1.17.0 through 1.23.0, does not validate the TLS certificate provided to it by the Anbox Stream Agent. An attacker must be able to machine-in-the-middle the Anbox Stream Agent from within an internal network before they can attempt to take advantage of this.