CVE-2025-68152 in Juju
Zusammenfassung (Englisch)
Juju is an open source application orchestration engine that enables any application operation on any infrastructure at any scale through special operators called ‘charms’. From versions 2.9 to before 2.9.56 and 3.6 to before 3.6.19, it is possible that a compromised workload machine under a Juju controller can read any log file for any entity in any model at any level. This issue has been patched in versions 2.9.56 and 3.6.19.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Zuständig
GitHub_M
Reservieren
15.12.2025
Veröffentlichung
03.04.2026
Status
Bestätigt
Einträge
VulDB provides additional information and datapoints for this CVE:
| ID | Schwachstelle | CWE | Aus | Mas | CVE |
|---|---|---|---|---|---|
| 355176 | Juju erweiterte Rechte | 863 | Nicht definiert | Offizieller Fix | CVE-2025-68152 |