Low · 2.0 CVE-2014-1428 EUVD-2014-1504GHSA-qq47-q6fw-c7qm

uuid.uuid1() is not suitable as an unguessable identifier/token

Published Apr 22, 2019 · Updated Sep 16, 2024 · Assigned by canonical

Description

A vulnerability in generate_filestorage_key of Ubuntu MAAS allows an attacker to brute-force filenames. This issue affects Ubuntu MAAS versions prior to 1.9.2.

Affected products

Vendor	Product	Affected	Fixed
Ubuntu	MAAS	unspecified – < 1.9.2	1.9.2

References

https://launchpad.net/maas/+milestone/1.9.2