Security Advisory

CVE-2014-1426

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2019-04-22 15:35:58
Last updated 2024-09-16 21:02:51
Assigner canonical
CVSS score 8.6
State PUBLISHED

Description

A vulnerability in maasserver.api.get_file_by_name of Ubuntu MAAS allows unauthenticated network clients to download any file. This issue affects: Ubuntu MAAS versions prior to 1.9.2.