5.3
Moyenne
CVE-2020-8021 a Improper Access Control vulnerability in of Open Build Service allows remote attackers to read files of an OBS package…
Description
a Improper Access Control vulnerability in of Open Build Service allows remote attackers to read files of an OBS package where the sourceaccess/access is disabled This issue affects: Open Build Service versions prior to 2.10.5.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Open Build Service 2.10 | premières → < 2.10.5 | 2.10.5 |
Références
- bugzilla.suse.com bugzilla.suse.com
- [debian-lts-announce] 20210203 [SECURITY] [DLA 2545-1] open-build-service security update lists.debian.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de Open Build Service
Les 13 CVE de Open Build Service →
CVE-2020-8031
A Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Open Build…
6.3
Moyenne
CVE-2018-12475
A Externally Controlled Reference to a Resource in Another Sphere vulnerability in obs-service-download_files of…
6.5
Moyenne
CVE-2018-12479
A Improper Input Validation vulnerability in Open Build Service allows remote attackers to cause DoS by specifying…
6.5
Moyenne
CVE-2018-12474
Improper input validation in obs-service-tar_scm of Open Build Service allows remote attackers to cause access and…
5.4
Moyenne