Canonical Ltd. Juju vulnerabilities

5 vulnerabilities

Known vulnerabilities in Canonical Ltd. Juju, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.7CVE-2024-7558canonical ltd.juju+2
EPSS score
0.50%
JUJU_CONTEXT_ID is a predictable authentication secret. On a Juju machine (non-Kubernetes) or Juju charm container (on Kubernetes), an unprivileged user in the same network namespace can connect to an abstract domain socket and guess the JUJU_CONTEXT_ID value. This gives the unprivileged user access to the same information and tools as the Juju charm.8.8CVE-2024-6984canonical ltd.juju+2
EPSS score
0.38%
An issue was discovered in Juju that resulted in the leak of the sensitive context ID, which allows a local unprivileged attacker to access other sensitive data or relation accessible to the local charm.6.5CVE-2024-8037canonical ltd.juju+2
EPSS score
0.19%
Vulnerable juju hook tool abstract UNIX domain socket. When combined with an attack of JUJU_CONTEXT_ID, any user on the local system with access to the default network namespace may connect to the @/var/lib/juju/agents/unit-xxxx-yyyy/agent.socket and perform actions that are normally reserved to a juju charm.7.9CVE-2024-8038canonical ltd.juju+2
EPSS score
0.21%
Vulnerable juju introspection abstract UNIX domain socket. An abstract UNIX domain socket responsible for introspection is available without authentication locally to network namespace users. This enables denial of service attacks.4.9CVE-2023-0092canonical ltd.juju+2
EPSS score
0.63%
An authenticated user who has read access to the juju controller model, may construct a remote request to download an arbitrary file from the controller's filesystem.