PT-2025-27515
CVE-2025-6224
·
Published
2025-07-01
·
Updated
2025-08-04
Description by
CVSS 3.1
6.5
MediumMetricsAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions:
juju/utils (affected versions not specified)
Description:
The issue concerns the generation of certificates in juju/utils using the cert.NewLeaf function, which could potentially include private information. If such a certificate is transferred over the network in plaintext, an attacker could intercept it and easily extract the private key.
Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾