ALT-PU-2018-1080-1
Closed vulnerabilities
Published: 2017-06-25
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2017-9868
In Mosquitto through 1.4.12, mosquitto.db (aka the persistence file) is world readable, which allows local users to obtain sensitive MQTT topic information.
Severity: MEDIUM (5.5)
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
References: