Certificate Generation Vulnerability in Juju Utils by Canonical
CVE-2025-6224
6.5MEDIUM
What is CVE-2025-6224?
A vulnerability exists in the certificate generation process in Juju Utils that could inadvertently include sensitive private information. If a certificate containing this information is transmitted over an unsecured network, it may be intercepted by an attacker. The attacker could then easily extract the private key, compromising the security of the application and its data. Users are advised to update to the latest version to mitigate this risk.
Affected Version(s)
Juju utils Linux 4.0.1 <= 4.0.3