CVE-2024-6984

An issue was discovered in Juju that resulted in the leak of the sensitive context ID, which allows a local unprivileged attacker to access other sensitive data or relation accessible to the local charm.

Affected

Canonical Ltd. · Juju

CVSS v3.1 NVD

3.8 LOWCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

CVSS v3.1 UBUNTU

8.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

EPSS

0.38% chance of exploitation in the next 30 days, 30th percentile

Published

2024-07-29

Updated

2024-08-01

Proof-of-concept exploits (1)

• juju/juju/security/advisories/GHSA-6vjm-54vp-mxhx

Security advisories

• https://www.cve.org/CVERecord?id=CVE-2024-6984
• juju/juju/commit/da929676853092a29ddf8d589468cf85ba3efaf2

References

• CVE Record
• NVD entry