[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fS-4dqknruu6q8wGHQ9WcOtF9jqpV-dn-xHTh6u9EzEk":3,"g5a-risk:CVE-2024-6156":110},{"success":4,"data":5,"meta":107},true,{"cveId":6,"title":7,"description":8,"shortDescription":8,"publishedDate":9,"lastModified":10,"cvssScore":11,"cvssVector":12,"cvssMetrics":13,"epssScore":29,"epssPercentile":24,"epssTimeSeries":30,"severity":31,"affectedProducts":32,"affectedProductsCount":38,"references":39,"referencesCount":25,"weaknesses":51,"weaknessesCount":38,"isActivelyExploited":60,"cisaInfo":24,"otxData":24,"relatedBlogPosts":61,"seoMetadata":62,"configurations":87,"relatedVendorCves":105,"notableEvents":106},"CVE-2024-6156","What is CVE-2024-6156?","Mark Laing discovered that LXD's PKI mode, until version 5.21.2, could be bypassed if the client's certificate was present in the trust store.","2024-12-06T00:15:04.38","2025-08-26T17:22:01.483",3.8,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:C\u002FC:L\u002FI:N\u002FA:N",{"CVSSMetricV31":14,"CVSSMetricV30":27,"CVSSMetricV2":28,"CVSSMetricV40":24},[15],{"Source":16,"Type":17,"CVSSData":18,"ExploitabilityScore":25,"ImpactScore":26},"security@ubuntu.com","Secondary",{"Version":19,"VectorString":12,"AttackVector":20,"AttackComplexity":21,"PrivilegesRequired":21,"UserInteraction":22,"Scope":23,"ConfidentialityImpact":21,"IntegrityImpact":22,"AvailabilityImpact":22,"BaseScore":11,"BaseSeverity":21,"ExploitCodeMaturity":24,"RemediationLevel":24,"ReportConfidence":24,"TemporalScore":24,"TemporalSeverity":24,"ConfidentialityRequirement":24,"IntegrityRequirement":24,"AvailabilityRequirement":24,"ModifiedAttackVector":24,"ModifiedAttackComplexity":24,"ModifiedPrivilegesRequired":24,"ModifiedUserInteraction":24,"ModifiedScope":24,"ModifiedConfidentialityImpact":24,"ModifiedIntegrityImpact":24,"ModifiedAvailabilityImpact":24,"EnvironmentalScore":24,"EnvironmentalSeverity":24},"3.1","LOCAL","LOW","NONE","CHANGED",null,2,1.4,[],[],0.00159,[29,29,29,29,29,29,29],"Low",[33],{"vendor":34,"product":35,"version":36,"criteria":37,"vulnerable":4},"canonical","lxd","*","cpe:2.3:a:canonical:lxd:*:*:*:*:*:*:*:*",1,[40,46],{"url":41,"source":42,"tags":43},"https:\u002F\u002Fgithub.com\u002Fcanonical\u002Flxd\u002Fsecurity\u002Fadvisories\u002FGHSA-4c49-9fpc-hc3v","GitHub",[44,45],"Exploit","Vendor Advisory",{"url":47,"source":48,"tags":49},"https:\u002F\u002Fwww.cve.org\u002FCVERecord?id=CVE-2024-6156","Cve",[50],"Third Party Advisory",[52],{"id":53,"name":54,"description":55,"extendedDescription":56,"status":57,"abstraction":58,"structure":59},"CWE-295","Improper Certificate Validation","The product does not validate, or incorrectly validates, a certificate.","When a certificate is invalid or malicious, it might allow an attacker to spoof a trusted entity by interfering in the communication path between the host and client. The product might connect to a malicious host while believing it is a trusted host, or the product might be deceived into accepting spoofed data that appears to originate from a trusted host.","Draft","Base","Simple",false,[],{"title":63,"metaDescription":64,"keywords":65,"canonicalUrl":66,"structuredData":67},"What is CVE-2024-6156? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2024-6156, a low severity cyber security vulnerability from 2024. Mark Laing discovered that LXD's PKI mode, until version 5.21...","CVE-2024-6156, CVE-2024-6156 vulnerability, CVE-2024-6156 security, low severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2024, CVSS score, exploit, patch, remediation, canonical security, lxd vulnerability","\u002Fwhat-is\u002Fcve-2024-6156",{"@context":68,"@type":69,"headline":63,"description":64,"datePublished":9,"dateModified":10,"author":70,"publisher":74,"about":78,"mainEntityOfPage":82,"articleSection":85,"keywords":86},"https:\u002F\u002Fschema.org","TechArticle",{"@type":71,"name":72,"url":73},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":71,"name":72,"url":73,"logo":75},{"@type":76,"url":77},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":79,"name":6,"description":80,"additionalType":81},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":83,"@id":84},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2024-6156","Cybersecurity","CVE-2024-6156, CVE-2024-6156 vulnerability, CVE-2024-6156 security, low severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[88],{"Operator":24,"Negate":24,"Nodes":89},[90],{"Operator":91,"Negate":60,"CPEMatch":92},"OR",[93,97,101],{"Vulnerable":4,"Criteria":37,"MatchCriteriaID":94,"VersionStartExcluding":24,"VersionStartIncluding":95,"VersionEndExcluding":96,"VersionEndIncluding":24},"39F8A2B1-F73D-4ADB-8E4D-E9D42D2ABB7B","4.0.0","4.0.10",{"Vulnerable":4,"Criteria":37,"MatchCriteriaID":98,"VersionStartExcluding":24,"VersionStartIncluding":99,"VersionEndExcluding":100,"VersionEndIncluding":24},"E48F1136-C506-457C-B541-6290724B2070","5.0.0","5.0.4",{"Vulnerable":4,"Criteria":37,"MatchCriteriaID":102,"VersionStartExcluding":24,"VersionStartIncluding":103,"VersionEndExcluding":104,"VersionEndIncluding":24},"EF3D3966-CFB4-46B6-8BDA-BE54667A9482","5.1","5.21.2",[],[],{"lastModified":10,"cacheTime":108,"version":109},1793219455849,"2.0",{"score":111,"band":31,"action":112,"scoredAt":113},35,"Monitor","2026-10-28T07:05:09.776193+00:00"]