CVE-2013-1058
Description
maas-import-pxe-files in MAAS before 13.10 does not verify the integrity of downloaded files, which allows remote attackers to modify these files via a man-in-the-middle (MITM) attack.
Risk Information
Base Score
5.9
MODERATE
Vector
AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
EPSS Score
Exploitation Probability
0.666
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| Ubuntu MAAS Server (USN-2013-1) maas-cluster-controller_1.2+bzr1373+dfsg-0ubuntu1~12.04.6_all.deb | Linux |
Patch Details
No records foundReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234