Описание
Vulnerable juju hook tool abstract UNIX domain socket. When combined with an attack of JUJU_CONTEXT_ID, any user on the local system with access to the default network namespace may connect to the @/var/lib/juju/agents/unit-xxxx-yyyy/agent.socket and perform actions that are normally reserved to a juju charm.
| Релиз | Статус | Примечание |
|---|---|---|
| snap | released | 3.5.4 |
| upstream | released | 3.5.4 |
Показывать по
6.5 Medium
CVSS3
Связанные уязвимости
Vulnerable juju hook tool abstract UNIX domain socket. When combined with an attack of JUJU_CONTEXT_ID, any user on the local system with access to the default network namespace may connect to the @/var/lib/juju/agents/unit-xxxx-yyyy/agent.socket and perform actions that are normally reserved to a juju charm.
Vulnerable juju hook tool abstract UNIX domain socket. When combined w ...
Vulnerable juju hook tool abstract UNIX domain socket
6.5 Medium
CVSS3