In Mosquitto up to and including 1.4.12, mosquitto.db (aka the persistence file) is world readable, which allows local users to obtain sensitive MQTT topic information.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
eclipse mosquitto |
||
debian debian linux 8.0 |