{"id":"CVE-2025-6224","state":"PUBLISHED","title":"Key leakage in juju/utils certificates","description":"Certificate generation in juju/utils using the cert.NewLeaf function could include private information. If this certificate were then transferred over the network in plaintext, an attacker listening on that network could sniff the certificate and trivially extract the private key from it.","publishedAt":"2025-07-01T10:39:34.322Z","updatedAt":"2025-07-01T14:30:51.639Z","severity":{"score":6.5,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","source":"canonical"},"assigner":"canonical","products":["Canonical Juju utils"],"affected":[{"vendor":"Canonical","product":"Juju utils","packageName":"juju utils","defaultStatus":"unaffected","versions":[{"version":"4.0.1","status":"affected","lessThanOrEqual":"4.0.3","versionType":"semver"}],"platforms":["Linux"],"repo":"https://github.com/juju/utils"}],"references":["https://github.com/juju/utils/security/advisories/GHSA-h34r-jxqm-qgpr"],"weaknesses":["CWE-312"],"ingestedAt":"2026-10-29T20:10:04.440Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/6xxx/CVE-2025-6224.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2025-6224","state":"PUBLISHED","datePublished":"2025-07-01T10:39:34.322Z","dateUpdated":"2025-07-01T14:30:51.639Z","assignerShortName":"canonical","assignerOrgId":"cc1ad9ee-3454-478d-9317-d3e869d708bc","dateReserved":"2025-06-18T08:48:41.677Z"},"containers":{"cna":{"title":"Key leakage in juju/utils certificates","descriptions":[{"lang":"en","value":"Certificate generation in juju/utils using the cert.NewLeaf function could include private information. If this certificate were then transferred over the network in plaintext, an attacker listening on that network could sniff the certificate and trivially extract the private key from it."}],"affected":[{"vendor":"Canonical","product":"Juju utils","packageName":"juju utils","defaultStatus":"unaffected","versions":[{"version":"4.0.1","status":"affected","lessThanOrEqual":"4.0.3","versionType":"semver"}],"platforms":["Linux"],"repo":"https://github.com/juju/utils"}],"references":[{"url":"https://github.com/juju/utils/security/advisories/GHSA-h34r-jxqm-qgpr"}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-312","description":"CWE-312 Cleartext Storage of Sensitive Information","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"canonical","orgId":"cc1ad9ee-3454-478d-9317-d3e869d708bc","dateUpdated":"2025-07-01T10:39:34.322Z"},"datePublic":"2025-07-01T00:00:00.000Z","impacts":[{"capecId":"CAPEC-131","descriptions":[{"lang":"en","value":"CAPEC-131 Resource Leak Exposure"}]}],"credits":[{"lang":"en","type":"reporter","value":"Josh McSavaney"}],"source":{"advisory":"https://github.com/juju/utils/security/advisories/GHSA-h34r-jxqm-qgpr","discovery":"EXTERNAL"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-07-01T14:30:33.241503Z","id":"CVE-2025-6224","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-07-01T14:30:51.639Z"}}]}}}