304 matches found
CVE-2015-1316
Juju Core's Joyent provider before version 1.25.5 uploads the user's private ssh key...
Design/Logic Flaw
Juju Core's Joyent provider before version 1.25.5 uploads the user's private ssh key...
CVE-2015-1316 Juju Joyent provider uploads user's private ssh key by default
Juju Core's Joyent provider before version 1.25.5 uploads the user's private ssh key...
CVE-2015-1316
Juju Core’s Joyent provider is affected in releases before 1.25.5 where the component uploads the user’s private SSH key. The vulnerability stems from improper handling of SSH material, enabling potential exposure of private keys. Impact is described as private key disclosure, with CVSS metrics i...
Privilege Escalation
github.com/juju/juju is vulnerable to privilege escalation. The application does not set up the UNIX Socket with proper permissions, allowing a malicious user to gain root privileges through the juju-run 'whoami' command...
Juju-run Agent Privilege Escalation Exploit
This Metasploit module attempts to gain root privileges on Juju agent systems running the juju-run agent utility. Juju agent systems running agent tools prior to version 1.25.12, 2.0.x before 2.0.4, and 2.1.x before 2.1.3, provide a UNIX domain socket to manage software "units" without setting...
Juju-run Agent - Privilege Escalation (Metasploit)
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Juju-run Agent Privilege Escalation', 'Description' = %q This module attempts to gain root privileges on Juju agent systems running the juju-run...
Juju-run Agent Privilege Escalation
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Juju-run Agent Privilege Escalation', 'Description' = %q This module attempts to gain root privileges on Juju agent systems running the juju-run...
Man-in-the-Middle (MitM)
github.com/juju/juju is vulnerable to man-in-the-middle MitM attacks. The application's initial connection does not check if the host key is valid, allowing a malicious user to conduct a MitM attack...
Privilege Escalation
github.com/juju/juju is vulnerable to privilege escalation. A malicious user with access to the terminal can gain root privileges through the command juju-run 'whoami'...
Canonical Juju Elevation of Privilege Vulnerability
Canonical Juju is an open source application modeling attack from Canonical, USA. An elevation of privilege vulnerability exists in Canonical Juju versions prior to 1.25.12, 2.0.x versions prior to 2.0.4, and 2.1.x versions prior to 2.1.3, which stems from a program using UNIX domain sockets...
Ubuntu 14.04 LTS / 16.04 LTS : juju-core vulnerability (USN-3300-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3300-1 advisory. Ryan Beisner discovered juju did not set permissions on a Unix domain socket. A local attacker could use this flaw to gain administrative privileges...
Privilege escalation
Juju before 1.25.12, 2.0.x before 2.0.4, and 2.1.x before 2.1.3 uses a UNIX domain socket without setting appropriate permissions, allowing privilege escalation by users on the system to root...
CVE-2017-9232
Juju before 1.25.12, 2.0.x before 2.0.4, and 2.1.x before 2.1.3 uses a UNIX domain socket without setting appropriate permissions, allowing privilege escalation by users on the system to root...
CVE-2017-9232
Juju before 1.25.12, 2.0.x before 2.0.4, and 2.1.x before 2.1.3 uses a UNIX domain socket without setting appropriate permissions, allowing privilege escalation by users on the system to root...
CVE-2017-9232
Juju before 1.25.12, 2.0.x before 2.0.4, and 2.1.x before 2.1.3 uses a UNIX domain socket without setting appropriate permissions, allowing privilege escalation by users on the system to root...
CVE-2017-9232
CVE-2017-9232 affects Juju before 1.25.12, 2.0.x before 2.0.4, and 2.1.x before 2.1.3, due to a UNIX domain socket being created without proper permissions, enabling local privilege escalation to root. Public sources confirm exploitation paths via local tooling (e.g., Juju-run agent privilege esc...
Ubuntu: Security Advisory (USN-3300-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
