Approved changes feed: RSS · Atom

cpe:2.3:a:canonical_ltd.:anbox_cloud:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCanonical Ltd. (21cecf50-6351-52a5-ba2e-69c633014465)
ProductAnbox Cloud (f660fd1e-eb44-5d2c-8e69-ee152410ec14)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-8287 vulnerable 2026-06-03 14:58:18.020639 Details available
HIGH (7.5)
Anbox Management Service, in versions 1.17.0 through 1.23.0, does not validate the TLS certificate provided to it by the Anbox Stream Agent. An attacker must be able to machine-in-the-middle the Anbox Stream Agent from within an internal network before they can attempt to take advantage of this.
Published: 2024-09-18T18:35:25.803Z
Updated: 2024-09-19T20:25:24.637Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.