PT-2018-11197 · Opensuse · Open Build Service

Marcus Meissner · Publicado 2018-08-01 · Atualizado 2019-10-09 · CVE-2018-12466

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions openSUSE openbuildservice versions prior to 9.2.4

Description The issue allows authenticated users to delete packages on specific projects with project links.

Recommendations For versions prior to 9.2.4, update to version 9.2.4 or later to resolve the issue.

Exploit

Correção

Improper Authorization

Incorrect Permission

Enumeração de Fraquezas

CWE-285

CWE-732

Identificadores relacionados

CVE-2018-12466

Produtos afetados

Open Build Service

Referências · 11

• 🔥 https://bugzilla.suse.com/show_bug.cgi?id=CVE-2018-12466 · Exploit
• https://github.com/openSUSE/open-build-service/commit/f57b660f49f830006766a8d4abc3b4af6e178063 · Nota
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-12466 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2018-12466 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2018-12466 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2018-12466 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2018-12466 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2018-12466 · Nota de Segurança
• http://securityfocus.com/bid/104958 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-12466 · Nota de Segurança
• https://bugzilla.suse.com/show_bug.cgi?id=1098934 · Nota