Skip to content
OpenAdvisories
High · 8.6 CVE-2014-1426 EUVD-2014-1502GHSA-8cwf-xm55-w837

get_file_by_name does not check owner

Published Apr 22, 2019 · Updated Sep 16, 2024 · Assigned by canonical

Description

A vulnerability in maasserver.api.get_file_by_name of Ubuntu MAAS allows unauthenticated network clients to download any file. This issue affects: Ubuntu MAAS versions prior to 1.9.2.

Affected products

VendorProductAffectedFixed
Ubuntu maas unspecified – < 1.9.2 1.9.2

References