CVE-2024-7558 - OpenCVE

JUJU_CONTEXT_ID is a predictable authentication secret. On a Juju machine (non-Kubernetes) or Juju charm container (on Kubernetes), an unprivileged user in the same network namespace can connect to an abstract domain socket and guess the JUJU_CONTEXT_ID value. This gives the unprivileged user access to the same information and tools as the Juju charm.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Changed

Confidentiality Impact Low

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

No data.

No data.

No data.

References

Link	Providers
https://github.com/juju/juju/security/advisories/GHSA-mh98-763h-m9v4
https://www.cve.org/CVERecord?id=CVE-2024-7558

History

Wed, 02 Oct 2024 14:30:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Wed, 02 Oct 2024 10:30:00 +0000

Type	Values Removed	Values Added
Description		JUJU_CONTEXT_ID is a predictable authentication secret. On a Juju machine (non-Kubernetes) or Juju charm container (on Kubernetes), an unprivileged user in the same network namespace can connect to an abstract domain socket and guess the JUJU_CONTEXT_ID value. This gives the unprivileged user access to the same information and tools as the Juju charm.
Weaknesses		CWE-1391 CWE-337 CWE-340
References		https://github.com/juju/juju/security/advisories/GHSA-mh98-763h-m9v4 https://www.cve.org/CVERecord?id=CVE-2024-7558
Metrics		cvssV3_1 `{'score': 8.7, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H'}`

MITRE

Status: PUBLISHED

Assigner: canonical

Published: 2024-10-02T10:06:31.098Z

Updated: 2024-10-02T13:59:04.171Z

Reserved: 2024-08-06T13:45:13.579Z

Link: CVE-2024-7558

Vulnrichment

Updated: 2024-10-02T13:58:58.178Z

NVD

Status : Awaiting Analysis

Published: 2024-10-02T11:15:11.460

Modified: 2024-10-04T13:50:43.727

Link: CVE-2024-7558

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-7558", "assignerOrgId": "cc1ad9ee-3454-478d-9317-d3e869d708bc", "state": "PUBLISHED", "assignerShortName": "canonical", "dateReserved": "2024-08-06T13:45:13.579Z", "datePublished": "2024-10-02T10:06:31.098Z", "dateUpdated": "2024-10-02T13:59:04.171Z"}, "containers": {"cna": {"affected": [{"packageName": "juju", "product": "Juju", "vendor": "Canonical Ltd.", "repo": "https://github.com/juju/juju", "platforms": ["Linux"], "versions": [{"status": "affected", "version": "3.5", "lessThan": "3.5.4", "versionType": "semver"}, {"status": "affected", "version": "3.4", "lessThan": "3.4.6", "versionType": "semver"}, {"status": "affected", "version": "3.3", "lessThan": "3.3.7", "versionType": "semver"}, {"status": "affected", "version": "3.1", "lessThan": "3.1.10", "versionType": "semver"}, {"status": "affected", "version": "2.9", "lessThan": "2.9.51", "versionType": "semver"}]}], "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-337", "description": "CWE-337: Predictable Seed in Pseudo-Random Number Generator (PRNG)", "type": "CWE"}]}, {"descriptions": [{"lang": "en", "cweId": "CWE-340", "description": "CWE-340: Generation of Predictable Numbers or Identifiers", "type": "CWE"}]}, {"descriptions": [{"lang": "en", "cweId": "CWE-1391", "description": "CWE-1391: Use of Weak Credentials", "type": "CWE"}]}], "descriptions": [{"lang": "en", "value": "JUJU_CONTEXT_ID is a predictable authentication secret. On a Juju machine (non-Kubernetes) or Juju charm container (on Kubernetes), an unprivileged user in the same network namespace can connect to an abstract domain socket and guess the JUJU_CONTEXT_ID value. This gives the unprivileged user access to the same information and tools as the Juju charm."}], "references": [{"tags": ["issue-tracking"], "url": "https://github.com/juju/juju/security/advisories/GHSA-mh98-763h-m9v4"}, {"tags": ["issue-tracking"], "url": "https://www.cve.org/CVERecord?id=CVE-2024-7558"}], "credits": [{"lang": "en", "type": "finder", "value": "Harry Pidcock"}, {"lang": "en", "value": "Harry Pidcock", "type": "remediation developer"}, {"lang": "en", "value": "Mark Esler", "type": "coordinator"}], "metrics": [{"format": "CVSS", "cvssV3_1": {"version": "3.1", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "CHANGED", "confidentialityImpact": "LOW", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H", "baseScore": 8.7, "baseSeverity": "HIGH"}}], "providerMetadata": {"orgId": "cc1ad9ee-3454-478d-9317-d3e869d708bc", "shortName": "canonical", "dateUpdated": "2024-10-02T10:06:31.098Z"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-10-02T13:58:28.823188Z", "id": "CVE-2024-7558", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-10-02T13:59:04.171Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-7558", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-10-02T13:58:28.823188Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-10-02T13:58:58.178Z"}}], "cna": {"credits": [{"lang": "en", "type": "finder", "value": "Harry Pidcock"}, {"lang": "en", "type": "remediation developer", "value": "Harry Pidcock"}, {"lang": "en", "type": "coordinator", "value": "Mark Esler"}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 8.7, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}}], "affected": [{"repo": "https://github.com/juju/juju", "vendor": "Canonical Ltd.", "product": "Juju", "versions": [{"status": "affected", "version": "3.5", "lessThan": "3.5.4", "versionType": "semver"}, {"status": "affected", "version": "3.4", "lessThan": "3.4.6", "versionType": "semver"}, {"status": "affected", "version": "3.3", "lessThan": "3.3.7", "versionType": "semver"}, {"status": "affected", "version": "3.1", "lessThan": "3.1.10", "versionType": "semver"}, {"status": "affected", "version": "2.9", "lessThan": "2.9.51", "versionType": "semver"}], "platforms": ["Linux"], "packageName": "juju"}], "references": [{"url": "https://github.com/juju/juju/security/advisories/GHSA-mh98-763h-m9v4", "tags": ["issue-tracking"]}, {"url": "https://www.cve.org/CVERecord?id=CVE-2024-7558", "tags": ["issue-tracking"]}], "descriptions": [{"lang": "en", "value": "JUJU_CONTEXT_ID is a predictable authentication secret. On a Juju machine (non-Kubernetes) or Juju charm container (on Kubernetes), an unprivileged user in the same network namespace can connect to an abstract domain socket and guess the JUJU_CONTEXT_ID value. This gives the unprivileged user access to the same information and tools as the Juju charm."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-337", "description": "CWE-337: Predictable Seed in Pseudo-Random Number Generator (PRNG)"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-340", "description": "CWE-340: Generation of Predictable Numbers or Identifiers"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-1391", "description": "CWE-1391: Use of Weak Credentials"}]}], "providerMetadata": {"orgId": "cc1ad9ee-3454-478d-9317-d3e869d708bc", "shortName": "canonical", "dateUpdated": "2024-10-02T10:06:31.098Z"}}}, "cveMetadata": {"cveId": "CVE-2024-7558", "state": "PUBLISHED", "dateUpdated": "2024-10-02T13:59:04.171Z", "dateReserved": "2024-08-06T13:45:13.579Z", "assignerOrgId": "cc1ad9ee-3454-478d-9317-d3e869d708bc", "datePublished": "2024-10-02T10:06:31.098Z", "assignerShortName": "canonical"}, "dataVersion": "5.1"}