CVE-2024-8037
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Published Oct 2, 2024
Updated: Nov 1, 2024
CWE ID 276
Summary
CVE-2024-8037 is a newly disclosed vulnerability that affects the juju hook tool in UNIX-based systems. The issue lies in the abstract UNIX domain socket functionality, which can be exploited by any local user with access to the default network namespace. By connecting to the @/var/lib/juju/agents/unit-xxxx-yyyy/agent.socket, an attacker can perform actions that are typically restricted to juju charms, potentially leading to unauthorized control or data manipulation.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- Canonical System