Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-p6fp-h8pq-3x5p

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

Eclipse Mosquitto 1.5.x before 1.5.5 allows ACL bypass: if the option per_listener_settings was set to true, and the default listener was in use, and the default listener specified an acl_file, then the acl file was being ignored.

Eclipse Mosquitto 1.5.x before 1.5.5 allows ACL bypass: if the option per_listener_settings was set to true, and the default listener was in use, and the default listener specified an acl_file, then the acl file was being ignored.

EPSS

Процентиль: 77%
0.01645
Низкий

7.5 High

CVSS3

Дефекты

CWE-732

Связанные уязвимости

CVSS3: 7.5
ubuntu
почти 8 лет назад

Eclipse Mosquitto 1.5.x before 1.5.5 allows ACL bypass: if the option per_listener_settings was set to true, and the default listener was in use, and the default listener specified an acl_file, then the acl file was being ignored.

CVSS3: 7.5
nvd
почти 8 лет назад

Eclipse Mosquitto 1.5.x before 1.5.5 allows ACL bypass: if the option per_listener_settings was set to true, and the default listener was in use, and the default listener specified an acl_file, then the acl file was being ignored.

CVSS3: 7.5
debian
почти 8 лет назад

Eclipse Mosquitto 1.5.x before 1.5.5 allows ACL bypass: if the option ...

CVSS3: 8.1
altlinux
больше 7 лет назад

ALT-PU-2019-1213: package `mosquitto` update to version 1.5.6-alt1

EPSS

Процентиль: 77%
0.01645
Низкий

7.5 High

CVSS3

Дефекты

CWE-732