Vulnerability Details : CVE-2013-1069
Ubuntu Metal as a Service (MaaS) 1.2 and 1.4 uses world-readable permissions for txlongpoll.yaml, which allows local users to obtain RabbitMQ authentication credentials by reading the file.
Products affected by CVE-2013-1069
- cpe:2.3:a:ubuntu:metal_as_a_service:1.2:*:*:*:*:*:*:*
- cpe:2.3:a:ubuntu:metal_as_a_service:1.4:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2013-1069
0.05%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 11 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2013-1069
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
2.1
|
LOW | AV:L/AC:L/Au:N/C:P/I:N/A:N |
3.9
|
2.9
|
NIST |
CWE ids for CVE-2013-1069
-
Assigned by: nvd@nist.gov (Primary)
References for CVE-2013-1069
-
https://bugs.launchpad.net/ubuntu/%2Bsource/maas/%2Bbug/1254034
Bug #1254034 “txlongpoll.yaml contains password but is world rea...” : Bugs : maas package : Ubuntu
-
http://www.ubuntu.com/usn/USN-2105-1
USN-2105-1: MAAS vulnerabilities | Ubuntu security notices
Jump to