Описание
The /log endpoint on a Juju controller lacked sufficient authorization checks, allowing unauthorized users to access debug messages that could contain sensitive information.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| juju | removed | package |
Связанные уязвимости
CVSS3: 6.5
ubuntu
около 1 года назад
The /log endpoint on a Juju controller lacked sufficient authorization checks, allowing unauthorized users to access debug messages that could contain sensitive information.
CVSS3: 6.5
nvd
около 1 года назад
The /log endpoint on a Juju controller lacked sufficient authorization checks, allowing unauthorized users to access debug messages that could contain sensitive information.
CVSS3: 6.5
github
около 1 года назад
Juju vulnerable to sensitive log retrieval via authenticated endpoint without authorization