CVE-2015-1316

Juju Joyent provider uploads user's private ssh key by default

Medium · published April 22, 2019

CVSS v3.0
6.4
EPSS
1%
Percentile
66.9
In the wild
Unconfirmed
What it is

Juju Core's Joyent provider before version 1.25.5 uploads the user's private ssh key.

The record
Technical detail
CVSS v3.0
6.4 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01162 · 66.9th percentile
Published
2019-04-22T15:35Z
EPSS history
Timeline
  • 22 APR 15:35Z
    Juju Joyent provider uploads user's private ssh key by default
    cvelistv5