CVE-2013-1069

Ubuntu Metal as a Service (MaaS) 1.2 and 1.4 uses world-readable permissions for txlongpoll.yaml, which allows local users to obtain RabbitMQ authentication credentials by reading the file.

Score

CVSS 2.0 2.1 Low

Status

Modified - security@ubuntu.com

Published

2014-02-17

Last modified

2024-08-06

Weaknesses

CWE-264

Affected products

• Metal As A Service (Ubuntu)

References

• http://www.ubuntu.com/usn/USN-2105-1
• https://bugs.launchpad.net/ubuntu/%2Bsource/maas/%2Bbug/1254034