icon

We found results for “

CVE-2024-6984

Date: July 29, 2024

An issue was discovered in Juju that resulted in the leak of the sensitive context ID, which allows a local unprivileged attacker to access other sensitive data or relation accessible to the local charm.

Language: Go

Severity Score

Severity Score

Weakness Type (CWE)

Improper Access Control

CWE-284

Improper Privilege Management

CWE-269

Generation of Error Message Containing Sensitive Information

CWE-209

CVSS v3.1

Base Score:
Attack Vector (AV): LOCAL
Attack Complexity (AC): LOW
Privileges Required (PR): LOW
User Interaction (UI): NONE
Scope (S): CHANGED
Confidentiality (C): HIGH
Integrity (I): HIGH
Availability (A): HIGH

Do you need more information?

Contact Us