CVE-2013-1069

EUVD-2013-1109
Ubuntu Metal as a Service (MaaS) 1.2 and 1.4 uses world-readable permissions for txlongpoll.yaml, which allows local users to obtain RabbitMQ authentication credentials by reading the file.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
2.1 UNKNOWN
LOCAL
LOW
AV:L/AC:L/Au:N/C:P/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 14%
Affected Products (NVD)
VendorProductVersion
ubuntumetal_as_a_service
1.2
ubuntumetal_as_a_service
1.4
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
maas
lucid
dne
precise
Fixed 1.2+bzr1373+dfsg-0ubuntu1~12.04.5
released
quantal
Fixed 1.2+bzr1373+dfsg-0ubuntu1.2
released
raring
ignored
saucy
Fixed 1.4+bzr1693+dfsg-0ubuntu2.3
released
Common Weakness Enumeration
References
http://www.ubuntu.com/usn/USN-2105-1
https://bugs.launchpad.net/ubuntu/%2Bsource/maas/%2Bbug/1254034
http://www.ubuntu.com/usn/USN-2105-1
https://bugs.launchpad.net/ubuntu/%2Bsource/maas/%2Bbug/1254034