PT-2023-14621 · Suse · Obs-Service-Go Modules

Thomas Leroy · Publicado 2023-03-15 · Atualizado 2024-06-15 · CVE-2022-45155

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions SUSE openSUSE Factory obs-service-go modules versions prior to 0.6.1

Description An Improper Handling of Exceptional Conditions issue in obs-service-go modules of openSUSE Factory allows attackers that can influence the call to the service to delete files and directories on the system of the victim.

Recommendations For SUSE openSUSE Factory obs-service-go modules versions prior to 0.6.1, update to version 0.6.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the service to minimize the risk of exploitation.

Exploit

Correção

Improper Handling of Exceptional Conditions

Enumeração de Fraquezas

CWE-755

Identificadores relacionados

CVE-2022-45155

OPENSUSE-SU-2024:12740-1

Produtos afetados

Obs-Service-Go Modules

Referências · 9

• 🔥 https://bugzilla.suse.com/show_bug.cgi?id=1201138 · Exploit
• https://t.me/cvenotify/46228 · Publicação no Telegram
• https://osv.dev/vulnerability/openSUSE-SU-2024:12740-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2022-45155 · Nota
• https://t.me/cvenotify/46200 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2022-45155 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2022-45155 · Aviso do Fabricante
• https://t.me/cibsecurity/60047 · Publicação no Telegram
• https://t.me/cvenotify/46576 · Publicação no Telegram