ubuntu-pro-client Information Disclosure via Cleartext Bearer Token Exposure in Process Command Line
An information disclosure vulnerability exists in Canonical ubuntu-pro-client (formerly ubuntu-advantage-tools). The client validates Ubuntu Pro APT credentials by executing /usr/lib/apt/apt-helper using the download-file command. During this process, the secret bearer token is embedded directly in
the cleartext URL component passed via the command-line arguments (argv), resulting in a URL format such as https://bearer:<token>@esm.ubuntu.com/.../. On systems utilizing a default-mounted /proc file system where process-hiding mitigations (such as hidepid) are disabled, an unprivileged local attacker can
monitor system processes and read the sensitive bearer token directly from /proc/cmdline while the helper process is actively running. This leaked token can subsequently be used to gain unauthorized access to the victim's Ubuntu Pro or Expanded Security Maintenance (ESM) repositories.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
ubuntu-pro-client (ubuntu-advantage-tools)
Vendor
Canonical
Product
ubuntu-pro-client (ubuntu-advantage-tools)
Platforms
Linux
Default status
unaffected
Package
ubuntu-pro-client
Package collection
https://github.com/canonical/
ubuntu-pro-client (ubuntu-advantage-tools) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
python
37.3
Unavailable
None listed
Ubuntu 26.04 LTS
Vendor
Canonical
Product
Ubuntu 26.04 LTS
Platforms
Linux
Default status
affected
Package
ubuntu-advantage-tools
Package collection
https://launchpad.net/ubuntu/resolute
Ubuntu 26.04 LTS · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
37.2ubuntu0.1
unaffected
dpkg
Unavailable
Unavailable
None listed
Ubuntu 24.04 LTS
Vendor
Canonical
Product
Ubuntu 24.04 LTS
Platforms
Linux
Default status
affected
Package
ubuntu-advantage-tools
Package collection
https://launchpad.net/ubuntu/noble
Ubuntu 24.04 LTS · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
37.2ubuntu~24.04.1
unaffected
dpkg
Unavailable
Unavailable
None listed
Ubuntu 22.04 LTS
Vendor
Canonical
Product
Ubuntu 22.04 LTS
Platforms
Linux
Default status
affected
Package
ubuntu-advantage-tools
Package collection
https://launchpad.net/ubuntu/jammy
Ubuntu 22.04 LTS · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
37.2ubuntu~22.04.1
unaffected
dpkg
Unavailable
Unavailable
None listed
Ubuntu 20.04 LTS
Vendor
Canonical
Product
Ubuntu 20.04 LTS
Platforms
Linux
Default status
affected
Package
ubuntu-advantage-tools
Package collection
https://launchpad.net/ubuntu/focal
Ubuntu 20.04 LTS · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
37.1ubuntu0~20.04.1
unaffected
dpkg
Unavailable
Unavailable
None listed
Ubuntu 18.04 LTS
Vendor
Canonical
Product
Ubuntu 18.04 LTS
Platforms
Linux
Default status
affected
Package
ubuntu-advantage-tools
Package collection
https://launchpad.net/ubuntu/bionic
Ubuntu 18.04 LTS · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
37.1ubuntu0~18.04.1
unaffected
dpkg
Unavailable
Unavailable
None listed
Ubuntu 16.04 LTS
Vendor
Canonical
Product
Ubuntu 16.04 LTS
Platforms
Linux
Default status
affected
Package
ubuntu-advantage-tools
Package collection
https://launchpad.net/ubuntu/xenial
Ubuntu 16.04 LTS · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
37.1ubuntu0~16.04.1
unaffected
dpkg
Unavailable
Unavailable
None listed
Ubuntu 14.04 LTS
Vendor
Canonical
Product
Ubuntu 14.04 LTS
Platforms
Linux
Default status
affected
Package
ubuntu-advantage-tools
Package collection
https://launchpad.net/ubuntu/trusty
Ubuntu 14.04 LTS · Scoped product and version facts