CVE-2024-8287

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Anbox Management Service, in versions 1.17.0 through 1.23.0, does not validate the TLS certificate provided to it by the Anbox Stream Agent. An attacker must be able to machine-in-the-middle the Anbox Stream Agent from within an internal network before they can attempt to take advantage of this.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-295

Affected software

Vendor	Product	Versions
Canonical Ltd.	Anbox Cloud	>= 1.17.0, < 1.23.1
canonical	anbox_cloud	>= 1.17.0, < 1.23.1

References

https://bugs.launchpad.net/anbox-cloud/+bug/2077570Vendor Advisory
https://discourse.ubuntu.com/t/anbox-cloud-1-23-1-has-been-released/48141Release Notes
https://www.cve.org/CVERecord?id=CVE-2024-8287Third Party Advisory

Timeline

Published: Sep 18, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-82886.4The Guten Post Layout – An Advanced Post Grid Collection for WordPress Gutenberg plugin for WordPress is vulnerable to Stored Cross-Site Scr CVE-2024-82899.8The MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution plugin for WordPress is vulnerable to privilege escalation/de-e CVE-2024-82908.8The WCFM – Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible plugin for WordPress is vulnerable to Insec CVE-2024-82914.8Concrete CMS versions 9.0.0 to 9.3.3 and below 8.5.19 are vulnerable to Stored XSS in Image Editor Background Color. A rogue admin could ad CVE-2024-82929.8The WP-Recall – Registration, Profile, Commerce & More plugin for WordPress is vulnerable to privilege escalation/account takeover in all ve CVE-2024-82949.8A vulnerability, which was classified as critical, was found in FeehiCMS up to 2.1.1. This affects the function update of the file /admin/in CVE-2024-82959.8A vulnerability has been found in FeehiCMS up to 2.1.1 and classified as critical. This vulnerability affects the function createBanner of t CVE-2024-82969.8A vulnerability was found in FeehiCMS up to 2.1.1 and classified as critical. This issue affects the function insert of the file /admin/inde CVE-2024-82977.5A vulnerability was found in kitsada8621 Digital Library Management System 1.0. It has been classified as problematic. Affected is the funct CVE-2024-82985.5Memory request vulnerability in the memory management module Impact: Successful exploitation of this vulnerability may affect service confid CVE-2024-82997.8Uncontrolled Search Path Element vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suit CVE-2024-83007.0Dead Code vulnerability in Mitsubishi Electric GENESIS64 Version 10.97.2, 10.97.2 CFR1, 10.97.2 CRF2 and 10.97.3, Mitsubishi Electric Iconic