Skip to content
CVE PROGRAM SOURCE RECORD2.0 Low

CVE-2014-1428

uuid.uuid1() is not suitable as an unguessable identifier/token

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
canonical

Description

A vulnerability in generate_filestorage_key of Ubuntu MAAS allows an attacker to brute-force filenames. This issue affects Ubuntu MAAS versions prior to 1.9.2.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Ubuntu MAAS

  • unspecified to < 1.9.2affected

References