PT-2011-2364 · Suse · Opensuse Open Build Service

Published 2011-04-10 · Updated 2011-04-22 · CVE-2011-0462

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions SUSE openSUSE Build Service (OBS) versions prior to 2.1.6

Description The issue concerns multiple cross-site scripting (XSS) vulnerabilities in the login page of the webui component. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Recommendations For versions prior to 2.1.6, update to version 2.1.6 or later to resolve the issue.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2011-0462

Affected Products

Opensuse Open Build Service

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2011-0462 · Security Note
• http://news.opensuse.org/2011/03/02/build-service-team-releases-new-versions-fixing-security-problems · Note
• https://bugzilla.novell.com/show_bug.cgi?id=669909 · Note