PT-2023-14621 · Suse · Obs-Service-Go Modules

Thomas Leroy · Published 2023-03-15 · Updated 2024-06-15 · CVE-2022-45155

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions SUSE openSUSE Factory obs-service-go modules versions prior to 0.6.1

Description An Improper Handling of Exceptional Conditions issue in obs-service-go modules of openSUSE Factory allows attackers that can influence the call to the service to delete files and directories on the system of the victim.

Recommendations For SUSE openSUSE Factory obs-service-go modules versions prior to 0.6.1, update to version 0.6.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the service to minimize the risk of exploitation.

Exploit

Fix

Improper Handling of Exceptional Conditions

Weakness Enumeration

CWE-755

Related Identifiers

CVE-2022-45155

OPENSUSE-SU-2024:12740-1

Affected Products

Obs-Service-Go Modules

References · 9

• 🔥 https://bugzilla.suse.com/show_bug.cgi?id=1201138 · Exploit
• https://osv.dev/vulnerability/openSUSE-SU-2024:12740-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-45155 · Security Note
• https://osv.dev/vulnerability/CVE-2022-45155 · Vendor Advisory
• https://t.me/cvenotify/46228 · Telegram Post
• https://suse.com/security/cve/CVE-2022-45155 · Note
• https://t.me/cvenotify/46200 · Telegram Post
• https://t.me/cibsecurity/60047 · Telegram Post
• https://t.me/cvenotify/46576 · Telegram Post