PT-2019-7167

Name of the Vulnerable Software and Affected Versions Ubuntu MAAS versions prior to 1.9.2 Description The issue concerns the logging of credentials, including username and password, for the management interface in the SeaMicro provisioning of Ubuntu MAAS. Recommendations For versions prior to...

PT-2019-7076

Name of the Vulnerable Software and Affected Versions Ubuntu MAAS versions prior to 1.9.2 Description A vulnerability in the maasserver.api.get file by name function of Ubuntu MAAS allows unauthenticated network clients to download any file. Recommendations For versions prior to 1.9.2, update to...

PT-2019-7078

Name of the Vulnerable Software and Affected Versions Ubuntu MAAS versions prior to 1.9.2 Description A vulnerability in the generate filestorage key function of Ubuntu MAAS allows an attacker to brute-force filenames. Recommendations For versions prior to 1.9.2, update to version 1.9.2 or later ...

PT-2019-7077

Name of the Vulnerable Software and Affected Versions Ubuntu MAAS versions prior to 1.9.2 Description A vulnerability in the REST API of Ubuntu MAAS allows an attacker to cause a logged-in user to execute commands via cross-site scripting. Recommendations For versions prior to 1.9.2, update to...

CVE-2014-1426: Improper Input Validation

A vulnerability in maasserver.api.getfilebyname of Ubuntu MAAS allows unauthenticated network clients to download any file. This issue affects: Ubuntu MAAS versions prior to 1.9.2...

CVE-2015-1320: Undefined Security Weakness

The SeaMicro provisioning of Ubuntu MAAS logs credentials, including username and password, for the management interface. This issue affects Ubuntu MAAS versions prior to 1.9.2...

CVE-2013-1070

Cross-site scripting XSS vulnerability in the API in Ubuntu Metal as a Service MaaS 1.2 and 1.4 allows remote attackers to inject arbitrary web script or HTML via the op parameter to nodes/...

Cross site scripting

Cross-site scripting XSS vulnerability in the API in Ubuntu Metal as a Service MaaS 1.2 and 1.4 allows remote attackers to inject arbitrary web script or HTML via the op parameter to nodes/...

CVE-2013-1069

Ubuntu Metal as a Service MaaS 1.2 and 1.4 uses world-readable permissions for txlongpoll.yaml, which allows local users to obtain RabbitMQ authentication credentials by reading the file...

CVE-2013-1069

Ubuntu Metal as a Service MaaS 1.2 and 1.4 uses world-readable permissions for txlongpoll.yaml, which allows local users to obtain RabbitMQ authentication credentials by reading the file...

CVE-2013-1070

Cross-site scripting XSS vulnerability in the API in Ubuntu Metal as a Service MaaS 1.2 and 1.4 allows remote attackers to inject arbitrary web script or HTML via the op parameter to nodes/...