CVE-2018-20145

Eclipse Mosquitto 1.5.x before 1.5.5 allows ACL bypass: if the option per_listener_settings was set to true, and the default listener was in use, and the…

published December 13, 2018

CVSS
—
EPSS
2%
Percentile
76.3
In the wild
Unconfirmed
What it is

Eclipse Mosquitto 1.5.x before 1.5.5 allows ACL bypass: if the option per_listener_settings was set to true, and the default listener was in use, and the default listener specified an acl_file, then the acl file was being ignored.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01645 · 76.3th percentile
Published
2018-12-13T20:00Z
EPSS history
Timeline
  • 13 DEC 20:00Z
    Eclipse Mosquitto 1.5.x before 1.5.5 allows ACL bypass: if the option per_listener_settings was set to true, and the default listener was in use, and the…
    cvelistv5