Home

CVE-2017-9868

Description

In Mosquitto through 1.4.12, mosquitto.db (aka the persistence file) is world readable, which allows local users to obtain sensitive MQTT topic information.

Risk Information

Base Score
5.5
MODERATE
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS Score
Exploitation Probability
0.111

Associated Vulnerability

VulnerabilityOS Platform
Vulnerability CVE-2017-9868 are affected in Mosquitto 1.4.12Windows
Vulnerabilities CVE-2017-9868 are fixed in Eclipse Mosquitto MQTT broker (2.0.18)Windows
Vulnerabilities CVE-2017-9868 are fixed in Eclipse Mosquitto MQTT broker (x64) (2.0.18)Windows

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-333302Eclipse Mosquitto MQTT broker (2.0.18)
PATCH-333303Eclipse Mosquitto MQTT broker (x64) (2.0.18)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234