CVE-2013-1069: Ubuntu Metal as a Service (MaaS) 1.2 and 1.4 uses world-readable permissions for txlongpoll.yaml, which all...

Security readout for executives and security teams

Ubuntu MaaS 1.2 and 1.4 stored RabbitMQ authentication credentials in a configuration file readable by any local user. An attacker would need local access first, but exposed messaging credentials could help them interfere with or pivot within MaaS-managed infrastructure. Exposure is likely limited to organizations that deployed Ubuntu MaaS 1.2 or 1.4 and allowed untrusted or compromised local users on the MaaS host. Internet-only exposure is not supported by the provided sources. Treat this as a targeted infrastructure hygiene issue, not a broad internet emergency. Prioritize remediation if MaaS managed production provisioning or if multiple administrators or shared accounts had local access. Mitigation focus: Review Ubuntu USN-2105-1 and apply the vendor-recommended MaaS updates.; Verify MaaS hosts are no longer running affected 1.2 or 1.4 versions.; Restrict local shell access on MaaS infrastructure to trusted administrators only..

Prepared

Jun 14, 2026, 14:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.