description: In Eclipse Mosquitto versions 2.0 to 2.0.11, when using the dynamic security plugin, if the ability for a client to make subscriptions on a topic is revoked when a durable client is offline, then existing subscriptions for that client are not revoked.
problem types: CWE-285: Improper Authorization
affected:
{
vendor: The Eclipse Foundation
product: Eclipse Mosquitto
versions:
version: 2.0, status: affected, lessThan: unspecified, versionType: custom
version: unspecified, lessThanOrEqual: 2.0.11, status: affected, versionType: custom
}