CVE-2017-9868

—

CVSS 3.0

5.5 medium

EPSS

<1%p29

Published

Jun 25, 2017 (Jun 25, 2017)

Modified

Jun 17, 2026

Description

In Mosquitto through 1.4.12, mosquitto.db (aka the persistence file) is world readable, which allows local users to obtain sensitive MQTT topic information.

Vendors: eclipse debian
Products: mosquitto, debian linux
Weakness: CWE-200
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.