CVE-2017-9868

Published
View on NVD ↗
CVSS v3
N/A
CVSS v2
2.1
LOW
Affected
1
PROJECT

Description

In Mosquitto through 1.4.12, mosquitto.db (aka the persistence file) is world readable, which allows local users to obtain sensitive MQTT topic information.

Eclipse Mosquitto - An open source MQTT broker
GitHubGitHub
10.9K