medium5.5
CVE-2017-9868
In Mosquitto through 1.4.12, mosquitto.db (aka the persistence file) is world readable, which allows local users to obtain sensitive MQTT topic information.
Impact
In Mosquitto through 1.4.12, mosquitto.db (aka the persistence file) is world readable, which allows local users to obtain sensitive MQTT topic information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Eclipse | Mosquitto | through 1.4.12 |
| Debian | Debian Linux | Version 8.0 |