CVE Catalog
CVE-2017-9232
CriticalSummary
Juju versions before 1.25.12, 2.0.x before 2.0.4, and 2.1.x before 2.1.3 use a UNIX domain socket without setting appropriate permissions, allowing privilege escalation by users on the system to root.
Risk Assessment
Privilege escalation may lead to unauthorized access to the system and potential takeover by unauthorized users.
Recommendation
It is recommended to update Juju to the latest version to mitigate this vulnerability and ensure proper permission settings for UNIX domain sockets.
Original NVD description (English source)
Juju before 1.25.12, 2.0.x before 2.0.4, and 2.1.x before 2.1.3 uses a UNIX domain socket without setting appropriate permissions, allowing privilege escalation by users on the system to root.