Cantata before 1.2.2 does not restrict access to files in the play queue, which allows remote attackers to obtain sensitive information by reading the songs in the queue.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Cantata | Craig_drummond | * | 1.2.1 (including) |
| Cantata | Craig_drummond | 0.7.0 (including) | 0.7.0 (including) |
| Cantata | Craig_drummond | 0.7.1 (including) | 0.7.1 (including) |
| Cantata | Craig_drummond | 0.8.0 (including) | 0.8.0 (including) |
| Cantata | Craig_drummond | 0.8.1 (including) | 0.8.1 (including) |
| Cantata | Craig_drummond | 0.8.2 (including) | 0.8.2 (including) |
| Cantata | Craig_drummond | 0.8.3 (including) | 0.8.3 (including) |
| Cantata | Craig_drummond | 0.8.3.1 (including) | 0.8.3.1 (including) |
| Cantata | Craig_drummond | 0.9.0 (including) | 0.9.0 (including) |
| Cantata | Craig_drummond | 0.9.1 (including) | 0.9.1 (including) |
| Cantata | Craig_drummond | 0.9.2 (including) | 0.9.2 (including) |
| Cantata | Craig_drummond | 1.0.0 (including) | 1.0.0 (including) |
| Cantata | Craig_drummond | 1.0.1 (including) | 1.0.1 (including) |
| Cantata | Craig_drummond | 1.0.2 (including) | 1.0.2 (including) |
| Cantata | Craig_drummond | 1.0.3 (including) | 1.0.3 (including) |
| Cantata | Craig_drummond | 1.1.0 (including) | 1.1.0 (including) |
| Cantata | Craig_drummond | 1.1.1 (including) | 1.1.1 (including) |
| Cantata | Craig_drummond | 1.1.2 (including) | 1.1.2 (including) |
| Cantata | Craig_drummond | 1.1.3 (including) | 1.1.3 (including) |
| Cantata | Craig_drummond | 1.2.0 (including) | 1.2.0 (including) |
| Cantata | Ubuntu | raring | * |
| Cantata | Ubuntu | saucy | * |
| Cantata | Ubuntu | upstream | * |