CVE-2014-1428

A vulnerability in generate_filestorage_key of Ubuntu MAAS allows an attacker to brute-force filenames. This issue affects Ubuntu MAAS versions prior to 1.9.2.

Score

CVSS 3.0 5.3 Medium

Status

Modified - security@ubuntu.com

Published

2019-04-22

Last modified

2024-09-16

Weaknesses

CWE-254

Affected products

• Metal As A Service (Canonical)
• Maas (Ubuntu)

References

• https://launchpad.net/maas/+milestone/1.9.2