Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: openSUSE Open Build Service 2.9.3 Clear all filters
TI-2018-05544 CVE-2018-7689 · GHSA-mcfv-wm6f-9ch2

Open Build Service arbitrary package modification

Priority LOW 34

Lack of permission checks in the InitializeDevelPackage function in openSUSE Open Build Service before 2.9.3 allowed authenticated users to modify packages where they do not have write permissions.

CVSS 3.0HIGH 7.1 Network Low privileges No interaction EPSS 0.01208 Published 2018-06-07 Fixed in 2.9.3 CWE-862
TI-2018-05543 CVE-2018-7688 · GHSA-9fp2-98jv-g7j6

Open Build Service accepts arbitrary reviews

Priority LOW 33

A missing permission check in the review handling of openSUSE Open Build Service before 2.9.3 allowed all authenticated users to modify sources in projects where they do not have write permissions.

CVSS 3.0HIGH 7.1 Network Low privileges No interaction EPSS 0.01101 Published 2018-06-07 Fixed in 2.9.3 CWE-862