Vulnerability Database

308,681

Total vulnerabilities in the database

CVE-2018-20145

Eclipse Mosquitto 1.5.x before 1.5.5 allows ACL bypass: if the option per_listener_settings was set to true, and the default listener was in use, and the default listener specified an acl_file, then the acl file was being ignored.

  • Published: Dec 13, 2018
  • Updated: Nov 9, 2025
  • CVE: CVE-2018-20145
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 5
  • AV:N/AC:L/Au:N/C:N/I:P/A:N

CWEs:

Software From Fixed in
eclipse / mosquitto 1.5 1.5.5