CVE:CVE-2017-9868
CNNVD:CNNVD-201706-1049
Eclipse Mosquitto是Eclipse基金会的一款开源的消息代理软件。
Eclipse Mosquitto 1.4.12及之前的版本中存在安全漏洞，该漏洞源于程序将mosquitto.db文件设置为全局可读。本地攻击者可利用该漏洞获取敏感的MQTT主题信息。
solution:Upgrade eclipse mosquitto to a higher version than 1.4.12,and avoid the version (,1.4.12]; Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0