Filtered by vendor Canonical Subscriptions
Filtered by product Juju Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2015-1316 1 Canonical 1 Juju 2019-10-09 N/A
Juju Core's Joyent provider before version 1.25.5 uploads the user's private ssh key.
CVE-2017-9232 1 Canonical 1 Juju 2019-10-03 N/A
Juju before 1.25.12, 2.0.x before 2.0.4, and 2.1.x before 2.1.3 uses a UNIX domain socket without setting appropriate permissions, allowing privilege escalation by users on the system to root.