CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
AI Score
Confidence
Low
EPSS
Percentile
5.1%
Ubuntu Metal as a Service (MaaS) 1.2 and 1.4 uses world-readable permissions for txlongpoll.yaml, which allows local users to obtain RabbitMQ authentication credentials by reading the file.
Vendor | Product | Version | CPE |
---|---|---|---|
ubuntu | metal_as_a_service | 1.2 | cpe:2.3:a:ubuntu:metal_as_a_service:1.2:*:*:*:*:*:*:* |
ubuntu | metal_as_a_service | 1.4 | cpe:2.3:a:ubuntu:metal_as_a_service:1.4:*:*:*:*:*:*:* |