Description
Ubuntu Metal as a Service (MaaS) 1.2 and 1.4 uses world-readable permissions for txlongpoll.yaml, which allows local users to obtain RabbitMQ authentication credentials by reading the file.
Analysis and contextual insights are available on OpenCVE Cloud.
Remediation
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2013-1109 | Ubuntu Metal as a Service (MaaS) 1.2 and 1.4 uses world-readable permissions for txlongpoll.yaml, which allows local users to obtain RabbitMQ authentication credentials by reading the file. |
Ubuntu USN |
USN-2105-1 | MAAS vulnerabilities |
References
History
No history.
Status: PUBLISHED
Assigner: canonical
Published:
Updated: 2024-08-06T14:49:20.682Z
Reserved: 2013-01-11T00:00:00.000Z
Link: CVE-2013-1069
No data.
Status : Modified
Published: 2014-02-17T16:55:08.053
Modified: 2026-04-29T01:13:23.040
Link: CVE-2013-1069
No data.
OpenCVE Enrichment
No data.
Weaknesses
EUVD
Ubuntu USN