Vulnerabilities

TI-2024-07452 CVE-2024-8038 · GHSA-xwgj-vpm9-q2rq

Vulnerable juju introspection abstract UNIX domain socket.

LOW 34

Vulnerable juju introspection abstract UNIX domain socket.

CVSS 3.1HIGH 7.9 Local Low privileges No interaction EPSS 0.00212 Published 2024-10-02 Fixed in 3.5.4, 3.4.6 +4 CWE-420

TI-2024-07451 CVE-2024-8037 · GHSA-8v4w-f4r9-7h6x

LOW 28

Vulnerable juju hook tool abstract UNIX domain socket.

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.00187 Published 2024-10-02 Fixed in 3.5.4, 3.4.6 +4 CWE-276

TI-2024-07005 CVE-2024-7558 · GHSA-mh98-763h-m9v4

LOW 38

JUJU_CONTEXT_ID is a predictable authentication secret.

CVSS 3.1HIGH 8.7 Local Low privileges No interaction EPSS 0.00502 Published 2024-10-02 Fixed in 3.5.4, 3.4.6 +4 CWE-1391