Unrated

A missing permission check in the review handling of openSUSE Open Build Service before 2.9.3 allowed all authenticated users to modify sources in pro...

CVE-2018-7688 First seen on SecPulse Jun 7, 2018

Fix status by distribution

Fixed packages published by each distribution for this CVE

Debian DEBIAN-CVE-2018-7688 open-build-service Fixed in: 2.9.4-1

Original description The description as published by the source.

A missing permission check in the review handling of openSUSE Open Build Service before 2.9.3 allowed all authenticated users to modify sources in projects where they do not have write permissions.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

patch github.com
report bugzilla.suse.com
web lists.opensuse.org

Key facts

Severity: Unrated
Published: Jun 7, 2018
First seen on SecPulse: Jun 7, 2018

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:50