Mark Laing discovered that LXDs PKI mode, until version 5.21.2, could be bypassed if the clients certificate was present in the trust store.
Weakness
The product does not validate, or incorrectly validates, a certificate.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Lxd | Canonical | 4.0.0 (including) | 4.0.10 (excluding) |
| Lxd | Canonical | 5.0.0 (including) | 5.0.4 (excluding) |
| Lxd | Canonical | 5.1 (including) | 5.21.2 (excluding) |
| Lxd | Ubuntu | focal | * |