Landscape's Apache server-status is accessible by default

CVE-2023-32550

What is CVE-2023-32550?

The Landscape product by Canonical is vulnerable due to its server-status page inadvertently disclosing sensitive system information. This vulnerability can be exploited through GET requests, potentially exposing further details from the Landscape API and facilitating additional attacks. Administrators should take immediate steps to restrict access to the server-status page to mitigate risks associated with this data leak.

References