CVE-2025-53512 | BDVDB-2026-285521 Detail
CanonicalJuju
Description#
The /log endpoint on a Juju controller lacked sufficient authorization checks, allowing unauthorized users to access debug messages that could contain sensitive information.
Impact#
Any user with a Juju account on a controller could read debug log messages from the /log endpoint.
Weaknesses#
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.