← Back

CVE-2024-6984

nvd nist
Published: Jul 29, 2024Modified: Jun 17, 2026

JSON object

Loading...
3.8
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
Exploitability: 2.0 / Impact: 1.4
Source: NVD

Description

An issue was discovered in Juju that resulted in the leak of the sensitive context ID, which allows a local unprivileged attacker to access other sensitive data or relation accessible to the local charm.

Affected (5)

Products: Canonical: Juju
Canonical
1 product
Juju
Configuration A
5 vulnerable
Vulnerable SoftwareAffected Versions
Canonical
Juju
2.9 ≤ version < 2.9.50
Juju
3.1 ≤ version < 3.1.9
Juju
3.3 ≤ version < 3.3.6
Juju
3.4 ≤ version < 3.4.5
Juju
3.5 ≤ version < 3.5.3

Related CWEs

CWE-209
Generation of Error Message Containing Sensitive Information
The product generates an error message that includes sensitive information about its environment, users, or associated data.

References (6)

Source: security@ubuntu.com
Patch
Source: security@ubuntu.com
ExploitVendor Advisory
Source: security@ubuntu.com
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

Timeline

No history available yet.