CVE-2023-0092Medium 4.9An authenticated user who has read access to the juju controller model, may construct a remote request to download an arbitrary file from the controller's filesystem.0.6%
CVE-2024-8038High 7.9Vulnerable juju introspection abstract UNIX domain socket. An abstract UNIX domain socket responsible for introspection is available without authentication locally to network namespace users. This ena0.2%
CVE-2024-8037Medium 6.5Vulnerable juju hook tool abstract UNIX domain socket. When combined with an attack of JUJU_CONTEXT_ID, any user on the local system with access to the default network namespace may connect to the @/v0.2%
CVE-2024-7558High 8.7JUJU_CONTEXT_ID is a predictable authentication secret. On a Juju machine (non-Kubernetes) or Juju charm container (on Kubernetes), an unprivileged user in the same network namespace can connect to an0.5%
CVE-2024-6984High 8.8An issue was discovered in Juju that resulted in the leak of the sensitive context ID, which allows a local unprivileged attacker to access other sensitive data or relation accessible to the local cha0.4%