Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-94gx-rm2c-cw59

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

A Improper Certificate Validation vulnerability in susestudio-common of SUSE Studio onsite allows remote attackers to MITM connections to the repositories, which allows the modification of packages received over these connections. This issue affects: SUSE Studio onsite susestudio-common version 1.3.17-56.6.3 and prior versions.

A Improper Certificate Validation vulnerability in susestudio-common of SUSE Studio onsite allows remote attackers to MITM connections to the repositories, which allows the modification of packages received over these connections. This issue affects: SUSE Studio onsite susestudio-common version 1.3.17-56.6.3 and prior versions.

EPSS

Процентиль: 30%
0.00114
Низкий

Связанные уязвимости

CVSS3: 3.7
nvd
около 6 лет назад

A Improper Certificate Validation vulnerability in susestudio-common of SUSE Studio onsite allows remote attackers to MITM connections to the repositories, which allows the modification of packages received over these connections. This issue affects: SUSE Studio onsite susestudio-common version 1.3.17-56.6.3 and prior versions.

EPSS

Процентиль: 30%
0.00114
Низкий