Ubuntu Metal As A Service
2 CVEs affecting Ubuntu Metal As A Service. Latest disclosed: 2014-02-17. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2013-1070 | | 2014-02-17 | Cross-site scripting (XSS) vulnerability in the API in Ubuntu Metal as a Service (MaaS) 1.2 and 1.4 allows remote attackers to inject arbitrary web script or H… | |
CVE-2013-1069 | | 2014-02-17 | Ubuntu Metal as a Service (MaaS) 1.2 and 1.4 uses world-readable permissions for txlongpoll.yaml, which allows local users to obtain RabbitMQ authentication cr… |