Darshan U

Authenticated low-privileged users can access payroll data of other employees due to missing authorization in the `tax regime selector.py` file. By providing another employee identifier, an attacker can read base pay, earning, and deduction components. Additionally, they can modify the tax regime on draft Salary Structure Assignments, which impacts tax withholding. This issue affects the following functions: `get employee details()`, `compute tax comparison()`, and `set tax regime()`.

A service component running as root within a WSL instance attaches the instance to Ubuntu Pro by executing the pro client and passing the Ubuntu Pro token as a command-line argument. On systems where `/proc` is mounted without process-hiding mitigations like `hidepid` (the default in WSL), an unprivileged local user or process can read the token from `/proc/<pid>/cmdline` during the attachment process. This leak allows an attacker to use the token to attach other machines to the victim's subscription and gain unauthorized access to Ubuntu Pro services and repositories.