Canonical Ubuntu Pro Client Information Disclosure Vulnerability

A vulnerability allowing information disclosure exists in Canonical ubuntu-pro-client (formerly ubuntu-advantage-tools). This issue arises because the client validates Ubuntu Pro APT credentials by executing a command that embeds the secret bearer token directly into the cleartext URL of the command-line arguments. On systems with a default-mounted /proc file system and no process-hiding mitigations, an unprivileged local attacker can read the sensitive token from the process command line of the running helper process. This leaked token could then be used to access the victim's Ubuntu Pro or Expanded Security Maintenance (ESM) repositories without authorization.

Impact

Exploitation of this vulnerability allows an unprivileged local attacker to access sensitive bearer tokens, which can be used to gain unauthorized access to Ubuntu Pro or ESM repositories.