EUVD-2013-1109

Malware in sbrugna...

EUVD-2013-1110

Malware in sbrugna...

CVE-2013-1069

Ubuntu Metal as a Service MaaS 1.2 and 1.4 uses world-readable permissions for txlongpoll.yaml, which allows local users to obtain RabbitMQ authentication credentials by reading the file...

CVE-2013-1070

Cross-site scripting XSS vulnerability in the API in Ubuntu Metal as a Service MaaS 1.2 and 1.4 allows remote attackers to inject arbitrary web script or HTML via the op parameter to nodes/...

CVE-2013-1069

Ubuntu Metal as a Service MaaS 1.2 and 1.4 uses world-readable permissions for txlongpoll.yaml, which allows local users to obtain RabbitMQ authentication credentials by reading the file...

PT-2014-2466

Name of the Vulnerable Software and Affected Versions Ubuntu Metal as a Service MaaS versions 1.2 and 1.4 Description The issue allows local users to obtain RabbitMQ authentication credentials by reading a file with world-readable permissions. This affects the txlongpoll.yaml file. Recommendation...

CVE-2013-1070: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the API in Ubuntu Metal as a Service MaaS 1.2 and 1.4 allows remote attackers to inject arbitrary web script or HTML via the op parameter to nodes/...

CVE-2013-1069: Undefined Security Weakness

Ubuntu Metal as a Service MaaS 1.2 and 1.4 uses world-readable permissions for txlongpoll.yaml, which allows local users to obtain RabbitMQ authentication credentials by reading the file...

PT-2014-2467

Name of the Vulnerable Software and Affected Versions Ubuntu Metal as a Service MaaS versions 1.2 through 1.4 Description A cross-site scripting XSS issue exists in the API, allowing remote attackers to inject arbitrary web script or HTML via the op parameter to the "nodes/" API endpoint...