Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8c64-q78q-87r6

Опубликовано: 29 июл. 2024
Источник: github
Github: Прошло ревью
CVSS3: 8.8

Описание

Duplicate Advisory: Juju leaks of the sensitive context ID

Duplicate Advisory

This advisory has been withdrawn because it is a duplicate of GHSA-6vjm-54vp-mxhx. This link has been maintained to preserve external references.

Original Description

An issue was discovered in Juju that resulted in the leak of the sensitive context ID, which allows a local unprivileged attacker to access other sensitive data or relation accessible to the local charm.

Пакеты

Наименование

github.com/juju/juju

go
Затронутые версииВерсия исправления

< 2.9.50

2.9.50

8.8 High

CVSS3

Дефекты

CWE-209

8.8 High

CVSS3

Дефекты

CWE-209