CVE-2014-1428: Canonical Metal As A Service

Medium severity, CVSS 5.3. EPSS: 0.9% chance of exploitation in the next 30 days.

A vulnerability in generate_filestorage_key of Ubuntu MAAS allows an attacker to brute-force filenames. This issue affects Ubuntu MAAS versions prior to 1.9.2.

Affected products

• Canonical Metal As A Service: before 1.9.2 (fixed in 1.9.2)

Published 2019-04-22. Last modified 2026-06-17.