CVE-2018-12546CWE-284

In Eclipse Mosquitto version 1.0 to 1.5.5 (inclusive) when a client publishes a retained message to a topic, then has its access to that topic revoked, the…

published March 27, 2019

CVSS
—
EPSS
1%
Percentile
56.2
In the wild
Unconfirmed
What it is

In Eclipse Mosquitto version 1.0 to 1.5.5 (inclusive) when a client publishes a retained message to a topic, then has its access to that topic revoked, the retained message will still be published to clients that subscribe to that topic in the future. In some applications this may result in clients being able cause effects that would otherwise not be allowed.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00802 · 56.2th percentile
Weakness
CWE-284 · Improper Access Control
Published
2019-03-27T17:26Z
EPSS history
Timeline
  • 27 MAR 17:26Z
    In Eclipse Mosquitto version 1.0 to 1.5.5 (inclusive) when a client publishes a retained message to a topic, then has its access to that topic revoked, the…
    cvelistv5