1. Home
  2. CVE Database
  3. CVE-2025-6224
MEDIUM · 6.5

CVE-2025-6224

Certificate generation in juju/utils using the cert.NewLeaf function could include private information. If this certificate were then transferred over the network in plaintext, an attacker listening o...

Vulnerability Description

Certificate generation in juju/utils using the cert.NewLeaf function could include private information. If this certificate were then transferred over the network in plaintext, an attacker listening on that network could sniff the certificate and trivially extract the private key from it.

CVSS Score

6.5

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
CanonicalJuju\/Utils>= 4.0.0, < 4.0.4

Related Weaknesses (CWE)

CWE-312

References

FAQ

What is CVE-2025-6224?

CVE-2025-6224 is a vulnerability with a CVSS score of 6.5 (MEDIUM). Certificate generation in juju/utils using the cert.NewLeaf function could include private information. If this certificate were then transferred over the network in plaintext, an attacker listening o...

How severe is CVE-2025-6224?

CVE-2025-6224 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2025-6224?

Check the references section above for vendor advisories and patch information. Affected products include: Canonical Juju\/Utils.