Описание
Eclipse Mosquitto 1.5.x before 1.5.5 allows ACL bypass: if the option per_listener_settings was set to true, and the default listener was in use, and the default listener specified an acl_file, then the acl file was being ignored.
Ссылки
- Third Party Advisory
- PatchThird Party Advisory
- Issue TrackingPatchThird Party Advisory
- Third Party Advisory
- PatchThird Party Advisory
- Issue TrackingPatchThird Party Advisory
Уязвимые конфигурации
EPSS
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
Связанные уязвимости
Eclipse Mosquitto 1.5.x before 1.5.5 allows ACL bypass: if the option per_listener_settings was set to true, and the default listener was in use, and the default listener specified an acl_file, then the acl file was being ignored.
Eclipse Mosquitto 1.5.x before 1.5.5 allows ACL bypass: if the option ...
Eclipse Mosquitto 1.5.x before 1.5.5 allows ACL bypass: if the option per_listener_settings was set to true, and the default listener was in use, and the default listener specified an acl_file, then the acl file was being ignored.
ALT-PU-2019-1213: package `mosquitto` update to version 1.5.6-alt1
EPSS
7.5 High
CVSS3
5 Medium
CVSS2