Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:13336
HistoryFeb 12, 2019 - 2:15 a.m.

Insecure Authorization

2019-02-1202:15:05
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11

EPSS

0.002

Percentile

53.2%

libmosquitto.so is vulnerable to insecure authorization. An empty ACL file or containing only blank lines or comments is treated as not defined and no topic access would be denied. This could lead to access being incorrectly granted and allow an attacker to access or modify resources that are otherwise not accessible.