CVE-2025-6224
Key leakage in juju/utils certificates
概要
Key leakage in juju/utils certificates
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Certificate generation in juju/utils using the cert.NewLeaf function could include private information. If this certificate were then transferred over the network in plaintext, an attacker listening on that network could sniff the certificate and trivially extract the private key from it.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- package github.com