Skip to content
OpenAdvisories

Package · Go

github.com/canonical/pebble

1 known vulnerabilities.

1 result · Feed

  • Medium 6.5

    Pebble service manager's file pull API allows access by any user

    It was discovered that Canonical's Pebble service manager read-file API and the associated pebble pull command, before v1.10.2, allowed unprivileged local users to read files with root-equivalent permissions when Pebble was running as root. Fixes are also ava…