CVE-2024-6156

LOW

3.8CVSS v3

—CVSS v2

0.05% EPSS (exploit probability)

CWE-295CWE

Description

Mark Laing discovered that LXD's PKI mode, until version 5.21.2, could be bypassed if the client's certificate was present in the trust store.

CVSS v3 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

No routers currently mapped to this CVE in our database.