Description (CNA)
An access control issue in NanoMQ v0.21.10 allows attackers to bypass security restrictions and access sensitive system topic messages using MQTT wildcard characters.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://github.com/nanomq/nanomq
- https://github.com/nanomq/nanomq/issues/1782#issuecomment-2171025812
- https://github.com/songxpu/bug_report/blob/master/MQTT/NanoMQ/CVE-2024-42655.md
ADP enrichment
No English description supplied.
No references supplied.