Skip to content
fr Sign in
4.9 Medium

CVE-2023-0092 An authenticated user who has read access to the juju controller model, may construct a remote request to download an…

Description

An authenticated user who has read access to the juju controller model, may construct a remote request to download an arbitrary file from the controller's filesystem.

Affected products and versions

Product Affected versions Fixed in
Juju 3.0 3.0.0 → < 3.0.3 3.0.3
Juju 2.9 2.9.22 → < 3.0.3 2.9.38

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Juju

The 5 CVEs of Juju →
CVE-2024-8038 Vulnerable juju introspection abstract UNIX domain socket 7.9 High CVE-2024-8037 Vulnerable juju hook tool abstract UNIX domain socket 6.5 Medium CVE-2024-7558 JUJU_CONTEXT_ID is a predictable authentication secret 8.7 High CVE-2024-6984 An issue was discovered in Juju that resulted in the leak of the sensitive context ID, which allows a local unprivileged… 8.8 High
Track this CVE