CVSS 3.1
3.8 lowCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:NCVE-2024-6984
An issue was discovered in Juju that resulted in the leak of the sensitive context ID, which allows a local unprivileged attacker to access other sensitive data or relation accessible to the local charm.
Severity
- EPSS
- 0.4% chance of exploitation in the next 30 days; higher than 31% of CVEs (scores of 2026-10-31)
- CWE
- CWE-209
- Published
- Modified
- Record from
- the NVD, synced
Affected
- canonical:juju
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-6vjm-54vp-mxhx | Go | github.com/juju/juju | <2.9.50 | 2.9.50 |
| GHSA-6vjm-54vp-mxhx | Go | github.com/juju/juju | >=3.0.0 <3.1.9 | 3.1.9 |
| GHSA-6vjm-54vp-mxhx | Go | github.com/juju/juju | >=3.2.0 <3.3.6 | 3.3.6 |
| GHSA-6vjm-54vp-mxhx | Go | github.com/juju/juju | >=3.4.0 <3.4.5 | 3.4.5 |
| GHSA-6vjm-54vp-mxhx | Go | github.com/juju/juju | >=3.5.0 <3.5.3 | 3.5.3 |
| GO-2024-3010 | Go | github.com/juju/juju | all versions | no fix published |
| GO-2024-3040 | Go | github.com/juju/juju | all versions | no fix published |
References
- https://github.com/juju/juju/commit/da929676853092a29ddf8d589468cf85ba3efaf2
- https://github.com/juju/juju/security/advisories/GHSA-6vjm-54vp-mxhx
- https://www.cve.org/CVERecord?id=CVE-2024-6984
- https://github.com/juju/juju/commit/da929676853092a29ddf8d589468cf85ba3efaf2
- https://github.com/juju/juju/security/advisories/GHSA-6vjm-54vp-mxhx