Launchpad.net

Launchpad Home
Code
Bugs
Blueprints
Translations
Answers

CVE 2017-9868

In Mosquitto through 1.4.12, mosquitto.db (aka the persistence file) is world readable, which allows local users to obtain sensitive MQTT topic information.

Related bugs and status

CVE-2017-9868 (Candidate) is related to these bugs:

Bug #1700490: Persistence file is world readable

Summary				In	Importance	Status
	1700490	Persistence file is world readable		mosquitto (Ubuntu)	Undecided	Fix Released

See the

CVE page on Mitre.org for more details.

References

CONFIRM: https://github.com/ecl...
MLIST: [debian-lts-announce] ...