Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2018-12467

Опубликовано: 01 авг. 2018
Источник: nvd
CVSS3: 6
CVSS3: 6.5
CVSS2: 5.5
EPSS Низкий

Описание

Authorized users of the openbuildservice before 2.9.4 could delete packages by using a malicious request against projects having the OBS:InitializeDevelPackage attribute, a similar issue to CVE-2018-7689.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:opensuse:open_build_service:*:*:*:*:*:*:*:*
Версия до 2.9.4 (исключая)

EPSS

Процентиль: 30%
0.00111
Низкий

6 Medium

CVSS3

6.5 Medium

CVSS3

5.5 Medium

CVSS2

Дефекты

CWE-285
CWE-732

Связанные уязвимости

ubuntu логотип

CVE-2018-12467

CVSS3: 6
ubuntu
около 7 лет назад

Authorized users of the openbuildservice before 2.9.4 could delete packages by using a malicious request against projects having the OBS:InitializeDevelPackage attribute, a similar issue to CVE-2018-7689.

debian логотип

CVE-2018-12467

CVSS3: 6
debian
около 7 лет назад

Authorized users of the openbuildservice before 2.9.4 could delete pac ...

github логотип

GHSA-24pm-f3f4-m533

CVSS3: 6.5
github
около 3 лет назад

Authorized users of the openbuildservice before 2.9.4 could delete packages by using a malicious request against projects having the OBS:InitializeDevelPackage attribute, a similar issue to CVE-2018-7689.

EPSS

Процентиль: 30%
0.00111
Низкий

6 Medium

CVSS3

6.5 Medium

CVSS3

5.5 Medium

CVSS2

Дефекты

CWE-285
CWE-732