critical9.8Public exploit code
CVE-2017-9232
Juju before 1.25.12, 2.0.x before 2.0.4, and 2.1.x before 2.1.3 uses a UNIX domain socket without setting appropriate permissions, allowing privilege escalatio…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Juju-run Agent - Privilege Escalation (Metasploit)2018-02-12 · local · linux · Verified
Impact
Juju before 1.25.12, 2.0.x before 2.0.4, and 2.1.x before 2.1.3 uses a UNIX domain socket without setting appropriate permissions, allowing privilege escalation by users on the system to root.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Canonical | Juju | through 1.25.12 Versions 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.1.0 |