Описание
The /log endpoint on a Juju controller lacked sufficient authorization checks, allowing unauthorized users to access debug messages that could contain sensitive information.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| juju | removed | package |
EPSS
Процентиль: 15%
0.00047
Низкий
Связанные уязвимости
CVSS3: 6.5
ubuntu
7 месяцев назад
The /log endpoint on a Juju controller lacked sufficient authorization checks, allowing unauthorized users to access debug messages that could contain sensitive information.
CVSS3: 6.5
nvd
7 месяцев назад
The /log endpoint on a Juju controller lacked sufficient authorization checks, allowing unauthorized users to access debug messages that could contain sensitive information.
CVSS3: 6.5
github
7 месяцев назад
Juju vulnerable to sensitive log retrieval via authenticated endpoint without authorization
EPSS
Процентиль: 15%
0.00047
Низкий