Approved changes feed: RSS · Atom
cpe:2.3:a:canonical:maas:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Canonical (bedcba35-8c3d-5a60-8532-2ba876a6ec88) |
|---|---|
| Product | Maas (c561e0c0-75bf-51e0-a98e-da5be3b9a782) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-7044 |
vulnerable | 2026-06-08 07:43:17.924973 |
Privilege Escalation in MAAS via Websocket Request Manipulation
HIGH (7.7)
An Improper Input Validation vulnerability exists in the user websocket handler of MAAS. An authenticated, unprivileged attacker can intercept a user.update websocket request and inject the is_superuser property set to true. The server improperly validates this input, allowing the attacker to self-promote to an administrator role. This results in full administrative control over the MAAS deployment.
Published: 2025-12-03T15:45:47.494Z
Updated: 2025-12-03T16:42:52.179Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-6107 |
vulnerable | 2026-06-08 06:58:17.790065 |
Details available
CRITICAL (9.6)
Due to insufficient verification, an attacker could use a malicious client to bypass authentication checks and run RPC commands in a region. This has been addressed in MAAS and updated in the corresponding snaps.
Published: 2025-07-21T08:52:56.608Z
Updated: 2025-07-21T17:07:16.633Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1058 |
vulnerable | 2026-06-08 05:03:52.326544 |
Details available
maas-import-pxe-files in MAAS before 13.10 does not verify the integrity of downloaded files, which allows remote attackers to modify these files via a man-in-the-middle (MITM) attack.
Published: 2013-11-23T18:00:00.000Z
Updated: 2024-08-06T14:49:20.493Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1057 |
vulnerable | 2026-06-08 05:03:52.324367 |
Details available
Untrusted search path vulnerability in maas-import-pxe-files in MAAS before 13.10 allows local users to execute arbitrary code via a Trojan horse import_pxe_files configuration file in the current working directory.
Published: 2013-11-15T18:16:00.000Z
Updated: 2024-09-16T23:52:02.118Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.