1 matches found
Juju has Improper TLS Client/Server authentication and certificate verification on Database Cluster
Impact Any Juju controller since 3.2.0. An attacker with only route-ability to the target juju controller Dqlite cluster endpoint may join the Dqlite cluster, read and modify all information, including escalating privileges, open firewall ports etc. This is due to not checking the client...
10CVSS5.9AI score0.00381EPSS
SaveExploits1References3Affected Software1
20