The /log endpoint on a Juju controller lacked sufficient authorization checks, allowing unauthorized users to access debug messages that could contain sensitive information.Referenceshttps://github.com/juju/juju/security/advisories/GHSA-r64v-82fh-xc63
