VYPR

Mosquitto

by Eclipse Mosquitto

Source repositories

CVEs (1)

  • CVE-2018-20145Dec 13, 2018
    risk 0.00cvss epss 0.00

    Eclipse Mosquitto 1.5.x before 1.5.5 allows ACL bypass: if the option per_listener_settings was set to true, and the default listener was in use, and the default listener specified an acl_file, then the acl file was being ignored.