The /log endpoint on a Juju controller lacked sufficient authorization checks, allowing unauthorized users to access debug messages that could contain sensitive information.
| Software | From | Fixed in |
|---|---|---|
github.com/juju/juju
|
- | 0.0.0-20250619024904-402ff008dcc2 |
| canonical / juju | - | 2.9.52 |
| canonical / juju | 3.0.0 | 3.6.8 |