CVE-2017-9868 in Mosquitto
Summary
In Mosquitto through 1.4.12, mosquitto.db (aka the persistence file) is world readable, which allows local users to obtain sensitive MQTT topic information.
Reservation
06/25/2017
Disclosure
06/25/2017
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 102794 | Mosquitto MQTT Topic information disclosure | 200 | Not defined | Official fix | CVE-2017-9868 |