CVE-2021-34434
Assigner: eclipse
Published: 2021-08-30T00:00:00
State: PUBLISHED
descriptions: value: In Eclipse Mosquitto versions 2.0 to 2.0.11, when using the dynamic security plugin, if the ability for a client to make subscriptions on a topic is revoked when a durable client is offline, then existing subscriptions for that client are not revoked.
affected: vendor: The Eclipse Foundation
product: Eclipse Mosquitto
versions: version: 2.0
status: affected
lessThan: unspecified
versionType: custom
version: unspecified
lessThanOrEqual: 2.0.11
status: affected
versionType: custom
problemTypes: descriptions: type: CWE
description: CWE-285: Improper Authorization
cweId: CWE-285