GO-2025-3639 Juju uses a UNIX domain socket without setting appropriate permissions in github.com/juju/juju

April 24, 2025 invoker category_cve

Vulnerability Details

Basic Information

Title GO-2025-3639 Juju uses a UNIX domain socket without setting appropriate permissions in github.com/juju/juju
Type osv
Published 2025-04-24T18:14:02
Last Seen 2025-04-24T19:36:14
CVSS Score 9.8 (CRITICAL)

CVSS v3 Details

Attack Vector NETWORK
Attack Complexity LOW
Privileges Required NONE
User Interaction NONE
Scope UNCHANGED
Confidentiality Impact HIGH
Integrity Impact HIGH
Availability Impact HIGH

CVE Information

CVE IDs CVE-2017-9232
CWE
Bulletin Family software

Description

Juju uses a UNIX domain socket without setting appropriate permissions in github.com/juju/juju

Impact Assessment

Base Score 9.8
Severity CRITICAL

View full CVE details

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.