CVE-2018-12546
CVE-2018-12546
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.8%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
27 Mar 2019Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
In Eclipse Mosquitto version 1.0 to 1.5.5 (inclusive) when a client publishes a retained message to a topic, then has its access to that topic revoked, the retained message will still be published to clients that subscribe to that topic in the future. In some applications this may result in clients being able cause effects that would otherwise not be allowed.
Affected products
The Eclipse Foundation · Eclipse MosquittoWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →