Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2017-9268

Опубликовано: 01 мар. 2018
Источник: nvd
CVSS3: 4.4
CVSS3: 6.5
CVSS2: 4
EPSS Низкий

Описание

In the open build service before 201707022 the wipetrigger and rebuild actions checked the wrong project for permissions, allowing authenticated users to cause operations on projects where they did not have permissions leading to denial of service (resource consumption).

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:opensuse:open_build_service:*:*:*:*:*:*:*:*
Версия до 2.8.2 (включая)

EPSS

Процентиль: 33%
0.00127
Низкий

4.4 Medium

CVSS3

6.5 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-285
CWE-732

Связанные уязвимости

CVSS3: 4.4
ubuntu
почти 8 лет назад

In the open build service before 201707022 the wipetrigger and rebuild actions checked the wrong project for permissions, allowing authenticated users to cause operations on projects where they did not have permissions leading to denial of service (resource consumption).

CVSS3: 4.4
debian
почти 8 лет назад

In the open build service before 201707022 the wipetrigger and rebuild ...

CVSS3: 6.5
github
больше 3 лет назад

In the open build service before 201707022 the wipetrigger and rebuild actions checked the wrong project for permissions, allowing authenticated users to cause operations on projects where they did not have permissions leading to denial of service (resource consumption).

EPSS

Процентиль: 33%
0.00127
Низкий

4.4 Medium

CVSS3

6.5 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-285
CWE-732