PT-2025-28633 · Juju · Juju

Wallyworld · Published 2025-07-08 · Updated 2026-01-08 · CVE-2025-53512

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Juju (affected versions not specified)

Description: The issue concerns the "/log" endpoint on a Juju controller, which lacked sufficient authorization checks. This allowed unauthorized users to access debug messages that could contain sensitive information.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Authorization

Information Disclosure

Weakness Enumeration

CWE-285

CWE-200

Related Identifiers

CVE-2025-53512

GHSA-R64V-82FH-XC63

GO-2025-3806

OPENSUSE-SU-2025:15405-1

Affected Products

Juju

References · 67

• 🔥 https://github.com/juju/juju/security/advisories/GHSA-r64v-82fh-xc63 · Exploit
• https://osv.dev/vulnerability/GO-2025-3806 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:15405-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-53512 · Security Note
• https://osv.dev/vulnerability/GHSA-r64v-82fh-xc63 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-53512 · Vendor Advisory
• https://github.com/juju/juju/commit/c91a1f4046956874ba77c8b398aecee3d61a2dc3 · Note
• https://github.com/juju/juju · Note
• https://github.com/juju/juju/commit/402ff008dcc2cb57f4441968628637efb5c2a662 · Note
• https://suse.com/security/cve/CVE-2025-46702 · Note
• https://suse.com/security/cve/CVE-2024-44906 · Note
• https://suse.com/security/cve/CVE-2025-3227 · Note
• https://suse.com/security/cve/CVE-2025-53633 · Note
• https://suse.com/security/cve/CVE-2025-47943 · Note
• https://suse.com/security/cve/CVE-2025-53634 · Note