CVE-2024-6984

An issue was discovered in Juju that resulted in the leak of the sensitive context ID, which allows a local unprivileged attacker to access other sensitive data or relation accessible to the local charm.

Score

CVSS 3.1 8.8 High

Status

Modified - security@ubuntu.com

Published

2024-07-29

Last modified

2024-08-01

Weaknesses

CWE-209

Affected products

• Juju (Canonical)
• Juju (Canonical Ltd.)

References

• https://github.com/juju/juju/commit/da929676853092a29ddf8d589468cf85ba3efaf2
• https://github.com/juju/juju/security/advisories/GHSA-6vjm-54vp-mxhx
• https://www.cve.org/CVERecord?id=CVE-2024-6984