CVEvulnerability

CVE-2024-6984

3.8 LOW Published 2024-07-29 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2024-07-29
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS 3.1 ([email protected])
3.8 LOW — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
Weaknesses
CWE-209

Description

An issue was discovered in Juju that resulted in the leak of the sensitive context ID, which allows a local unprivileged attacker to access other sensitive data or relation accessible to the local charm.

Affected configurations

• canonical juju (>= 2.9 < 2.9.50) • canonical juju (>= 3.1 < 3.1.9) • canonical juju (>= 3.3 < 3.3.6) • canonical juju (>= 3.4 < 3.4.5) • canonical juju (>= 3.5 < 3.5.3)

Related

Weakness · CWE (1)

  • CWE-209 Generation of Error Message Containing Sensitive Information weakness

References