{"id":"CVE-2017-9232","title":"Juju before 1.25.12, 2.0.x before 2.0.4, and 2.1.x before 2.1.3 uses a UNIX domain socket without setting appropriate permissions, allowing ","published":"2017-05-27T20:29:00.453Z","updated":"2026-06-16T21:27:43.617Z","severity":"critical","cvssScore":9.8,"epss":0.48501,"epssPct":0.98887,"kev":false,"maturity":"weaponized","actionScore":60,"primaryVendor":"canonical","primaryProduct":"juju","cweId":"CWE-862","fixAvailable":true,"tags":["pre-auth","authz","remote","no-ui"],"epssDelta7":0,"summary":"Juju before 1.25.12, 2.0.x before 2.0.4, and 2.1.x before 2.1.3 uses a UNIX domain socket without setting appropriate permissions, allowing privilege escalation by users on the system to root.","cvssVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvssVersion":"3.0","cvssSource":"nvd-primary","cweName":"Missing Authorization","kevAdded":null,"kevDue":null,"kevRansomware":null,"source":"nvd","cna":"mitre","ssvc":null,"sources":{"cna":"2024-08-05T17:02:44.062Z","osv":"2026-11-13T03:18:18.039Z","epss":"2026-11-12","cna_seen":"2026-09-29T10:51:04.317Z","exploitdb":"2026-11-13T03:17:58.683Z","metasploit":"2026-11-13T03:18:09.107Z"},"cvssCna":null,"hasPatchRef":false,"credits":[],"counts":{"exploitdb":1,"metasploit":1,"nuclei":0,"githubPoc":0},"products":[{"vendor":"canonical","product":"juju","cpe":"cpe:2.3:a:canonical:juju"}],"references":[{"url":"http://www.securityfocus.com/bid/98737","tags":"Third Party Advisory,VDB Entry"}],"exploits":[{"source":"exploitdb","kind":"local","date":"2018-02-12"},{"source":"metasploit","kind":"exploit","date":"2017-04-13"}],"analysis":null,"affectedVersions":[{"vendor":"canonical","product":"juju","version":"*","vsi":null,"vse":null,"vei":"1.25.12","vee":null},{"vendor":"canonical","product":"juju","version":"2.0.0","vsi":null,"vse":null,"vei":null,"vee":null},{"vendor":"canonical","product":"juju","version":"2.0.1","vsi":null,"vse":null,"vei":null,"vee":null},{"vendor":"canonical","product":"juju","version":"2.0.2","vsi":null,"vse":null,"vei":null,"vee":null},{"vendor":"canonical","product":"juju","version":"2.0.3","vsi":null,"vse":null,"vei":null,"vee":null},{"vendor":"canonical","product":"juju","version":"2.1.0","vsi":null,"vse":null,"vei":null,"vee":null},{"vendor":"canonical","product":"juju","version":"2.1.1","vsi":null,"vse":null,"vei":null,"vee":null},{"vendor":"canonical","product":"juju","version":"2.1.2","vsi":null,"vse":null,"vei":null,"vee":null}],"source_attribution":"NVD (NIST), CVE Program, CISA KEV, FIRST EPSS, OSV. Aggregated by Noroxi."}