CVE-2024-7558
- Source
- https://cve.org/CVERecord?id=CVE-2024-7558
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-7558.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2024-7558
- Aliases
- Downstream
- Related
- Published
- 2024-10-02T11:15:11.460Z
- Modified
- 2026-02-11T13:43:05.432637Z
- Severity
-
- 8.0 (High) CVSS_V3 - CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- [none]
- Details
-
JUJUCONTEXTID is a predictable authentication secret. On a Juju machine (non-Kubernetes) or Juju charm container (on Kubernetes), an unprivileged user in the same network namespace can connect to an abstract domain socket and guess the JUJUCONTEXTID value. This gives the unprivileged user access to the same information and tools as the Juju charm.
- References