This site currently shows sample data for demonstration.

Vulnerabilities

CVE-2025-53512 | BDVDB-2026-285521 Detail

CanonicalJuju

Description#

The /log endpoint on a Juju controller lacked sufficient authorization checks, allowing unauthorized users to access debug messages that could contain sensitive information.

Impact#

Any user with a Juju account on a controller could read debug log messages from the /log endpoint.

Weaknesses#

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
  • CWE-285 Improper Authentication

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.