Lucene search
+L

2 matches found

OSV
OSV
added 2024/04/05 3:3 p.m.63 views

GHSA-4685-2X5R-65PJ Pebble service manager's file pull API allows access by any user

Impact Note: "Pebble" here refers to Canonical's service manager, not the Let's Encrypt ACME test server. The API behind pebble pull, used to read files from the workload container by Juju charms, allows access from any user, instead of just admin. In Juju Kubernetes sidecar charms, Pebble and th...

6.5CVSS6.4AI score0.00201EPSS
SaveExploits0References9
Rows per page
Query Builder