CVE-2018-20145

5

MEDIUMCVSS v2

Published

December 13, 2018

Affected

1 project

Assigned by

MITRE

Severity scale

010

Description

Eclipse Mosquitto 1.5.x before 1.5.5 allows ACL bypass: if the option per_listener_settings was set to true, and the default listener was in use, and the default listener specified an acl_file, then the acl file was being ignored.

eclipse-mosquitto/mosquitto

GitHubEclipse Mosquitto - An open source MQTT broker

>= 1.5, < 1.5.5NVD

More on this CVE

NVD↗GitHub Advisory↗

Security Advisories

CVE-2018-20145

Description

More on this CVE