{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-08-02T04:45:08.376","vulnerabilities":[{"cve":{"id":"CVE-2024-7558","sourceIdentifier":"security@ubuntu.com","published":"2024-10-02T11:15:11.460","lastModified":"2026-06-17T08:20:26.893","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"JUJU_CONTEXT_ID is a predictable authentication secret. On a Juju machine (non-Kubernetes) or Juju charm container (on Kubernetes), an unprivileged user in the same network namespace can connect to an abstract domain socket and guess the JUJU_CONTEXT_ID value. This gives the unprivileged user access to the same information and tools as the Juju charm."},{"lang":"es","value":"JUJU_CONTEXT_ID es un secreto de autenticación predecible. En una máquina Juju (que no sea de Kubernetes) o un contenedor de Juju Charm (en Kubernetes), un usuario sin privilegios en el mismo espacio de nombres de red puede conectarse a un socket de dominio abstracto y adivinar el valor de JUJU_CONTEXT_ID. Esto le otorga al usuario sin privilegios acceso a la misma información y herramientas que el contenedor de Juju Charm."}],"affected":[{"source":"security@ubuntu.com","affectedData":[{"vendor":"Canonical Ltd.","product":"Juju","packageName":"juju","platforms":["Linux"],"repo":"https://github.com/juju/juju","versions":[{"version":"3.5","lessThan":"3.5.4","versionType":"semver","status":"affected"},{"version":"3.4","lessThan":"3.4.6","versionType":"semver","status":"affected"},{"version":"3.3","lessThan":"3.3.7","versionType":"semver","status":"affected"},{"version":"3.1","lessThan":"3.1.10","versionType":"semver","status":"affected"},{"version":"2.9","lessThan":"2.9.51","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"security@ubuntu.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H","baseScore":8.7,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.0,"impactScore":6.0},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.0,"baseSeverity":"HIGH","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.1,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-02T13:58:28.823188Z","id":"CVE-2024-7558","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security@ubuntu.com","type":"Secondary","description":[{"lang":"en","value":"CWE-337"},{"lang":"en","value":"CWE-340"},{"lang":"en","value":"CWE-1391"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-330"},{"lang":"en","value":"CWE-335"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:canonical:juju:*:*:*:*:*:*:*:*","versionEndExcluding":"2.9.51","matchCriteriaId":"956F1957-34C5-47D9-B922-107963295A1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:canonical:juju:*:*:*:*:*:*:*:*","versionStartIncluding":"3.1.0","versionEndExcluding":"3.1.10","matchCriteriaId":"32122910-827A-438E-B1DD-42C8E24D7F5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:canonical:juju:*:*:*:*:*:*:*:*","versionStartIncluding":"3.2.0","versionEndExcluding":"3.2.4","matchCriteriaId":"1911DB78-6756-49B9-BC0E-90EBBCFA20D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:canonical:juju:*:*:*:*:*:*:*:*","versionStartIncluding":"3.3.0","versionEndExcluding":"3.3.7","matchCriteriaId":"90FAD9A5-A5B3-4C53-B609-7BD399F4F6ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:canonical:juju:*:*:*:*:*:*:*:*","versionStartIncluding":"3.4","versionEndExcluding":"3.4.6","matchCriteriaId":"6693CCDC-308E-40B3-BC8A-F9A2320A06F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:canonical:juju:*:*:*:*:*:*:*:*","versionStartIncluding":"3.5.0","versionEndExcluding":"3.5.4","matchCriteriaId":"62BC59FA-04DB-4AC3-977D-691ED721171F"}]}]}],"references":[{"url":"https://github.com/juju/juju/security/advisories/GHSA-mh98-763h-m9v4","source":"security@ubuntu.com","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-7558","source":"security@ubuntu.com","tags":["Third Party Advisory"]}]}}]}