PT-2014-2466

CVE-2013-1069

Published

2014-02-17

Updated

2014-02-21

Description by

CVSS 2.0

2.1

Low

MetricsAV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Ubuntu Metal as a Service (MaaS) versions 1.2 and 1.4

Description The issue allows local users to obtain RabbitMQ authentication credentials by reading a file with world-readable permissions. This affects the txlongpoll.yaml file.

Recommendations For Ubuntu Metal as a Service (MaaS) version 1.2, update the permissions of the txlongpoll.yaml file to restrict access. For Ubuntu Metal as a Service (MaaS) version 1.4, update the permissions of the txlongpoll.yaml file to restrict access.

Exploitability

Fix

Researchers

Vendors

Affected products

Weakness enumeration

CWE-264

Related identifiers