CVE-2017-9868

In Mosquitto through 1.4.12, mosquitto.db (aka the persistence file) is world readable, which allows local users to obtain sensitive MQTT topic information

published June 25, 2017

CVSS
—
EPSS
0%
Percentile
28.5
In the wild
Unconfirmed
What it is

In Mosquitto through 1.4.12, mosquitto.db (aka the persistence file) is world readable, which allows local users to obtain sensitive MQTT topic information.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00361 · 28.5th percentile
Published
2017-06-25T14:00Z
EPSS history
Timeline
  • 25 JUN 14:00Z
    In Mosquitto through 1.4.12, mosquitto.db (aka the persistence file) is world readable, which allows local users to obtain sensitive MQTT topic information
    cvelistv5