JU
Product
Juju
5
CVEs
0
On KEV
8.0
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 3Low 1
Watch
Add Juju to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-7558 | 8.0 | Oct 2 | JUJU_CONTEXT_ID is a predictable authentication secret Affected: 3.5 before 3.5.4; 3.4 before 3.4.6; 3.3 before 3.3.7; 3.1 before 3.1.10; 2.9 before 2.9.51 |
| CVE-2024-8037 | 6.5 | Oct 2 | Vulnerable juju hook tool abstract UNIX domain socket Affected: 3.5 before 3.5.4; 3.4 before 3.4.6; 3.3 before 3.3.7; 3.1 before 3.1.10; 2.9 before 2.9.51 |
| CVE-2024-8038 | 5.5 | Oct 2 | Vulnerable juju introspection abstract UNIX domain socket Affected: 3.5 before 3.5.4; 3.4 before 3.4.6; 3.3 before 3.3.7; 3.1 before 3.1.10; 2.9 before 2.9.51 |
| CVE-2023-0092 | 4.9 | Jan 31 | An authenticated user who has read access to the juju controller model, may construct a remote request to download an arbitrary file from the controller's filesystem Affected: 2.9.22 before 2.9.38; 3.0.0 before 3.0.3; 2.9.38 before 3.0.3 |
| CVE-2024-6984 | 3.8 | Jul 29 | An issue was discovered in Juju that resulted in the leak of the sensitive context ID, which allows a local unprivileged attacker to access other sensitive data or relation… Affected: 3.5 before 3.5.3; 3.4 before 3.4.5; 3.3 before 3.3.5; 3.1 before 3.1.9; 2.9 before 2.9.50 |
Showing 5