Vulnerabilities

TI-2013-00932 CVE-2013-1070 · GHSA-xg6h-wxm2-f777

Cross-site scripting (XSS) vulnerability in the API in Ubuntu Metal as a Service (MaaS)…

LOW 25

Cross-site scripting (XSS) vulnerability in the API in Ubuntu Metal as a Service (MaaS) 1.2 and 1.4 allows remote attackers to inject arbitrary web script or HTML via the op parameter to nodes/.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02379 Published 2014-02-17 No fix listed CWE-79

TI-2013-00931 CVE-2013-1069 · GHSA-23gg-x39r-7c9v

Ubuntu Metal as a Service (MaaS) 1.2 and 1.4 uses world-readable permissions for…

LOW 11

Ubuntu Metal as a Service (MaaS) 1.2 and 1.4 uses world-readable permissions for txlongpoll.yaml, which allows local users to obtain RabbitMQ authentication credentials by reading the file.

CVSS 2.0LOW 2.1 Local No auth Interaction — EPSS 0.00379 Published 2014-02-17 No fix listed CWE-264

Vulnerabilities

Filters

Cross-site scripting (XSS) vulnerability in the API in Ubuntu Metal as a Service (MaaS)…

Ubuntu Metal as a Service (MaaS) 1.2 and 1.4 uses world-readable permissions for…