Описание
Duplicate Advisory: Juju leaks of the sensitive context ID
Duplicate Advisory
This advisory has been withdrawn because it is a duplicate of GHSA-6vjm-54vp-mxhx. This link has been maintained to preserve external references.
Original Description
An issue was discovered in Juju that resulted in the leak of the sensitive context ID, which allows a local unprivileged attacker to access other sensitive data or relation accessible to the local charm.
Пакеты
Наименование
github.com/juju/juju
go
Затронутые версииВерсия исправления
< 2.9.50
2.9.50
8.8 High
CVSS3
Дефекты
CWE-209
8.8 High
CVSS3
Дефекты
CWE-209