Local File Permission Vulnerability in Ubuntu Metal as a Service (MaaS)

CVE-2013-1069

What is CVE-2013-1069?

Ubuntu Metal as a Service (MaaS) versions 1.2 and 1.4 are susceptible to a vulnerability that arises from world-readable permissions set on the txlongpoll.yaml file. This misconfiguration allows local users to access the file, potentially exposing RabbitMQ authentication credentials. As a result, unauthorized access to the RabbitMQ service may be granted, posing a significant security risk to the affected systems. It is crucial to ensure appropriate file permissions to mitigate this vulnerability.

References