CVE-2025-6224
Key leakage in juju/utils certificates
Résumé
Key leakage in juju/utils certificates
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Certificate generation in juju/utils using the cert.NewLeaf function could include private information. If this certificate were then transferred over the network in plaintext, an attacker listening on that network could sniff the certificate and trivially extract the private key from it.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- package github.com