Skip to content
OpenAdvisories

Package · Go

github.com/juju/juju

19 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2017-9232 Public exploit EPSS 49%

    Juju uses a UNIX domain socket without setting appropriate permissions

    Juju before 1.25.12, 2.0.x before 2.0.4, and 2.1.x before 2.1.3 uses a UNIX domain socket without setting appropriate permissions, allowing privilege escalation by users on the system to root.

    github.com/juju/juju juju-core juju-core-1 Ubuntu Go