2018-06-07 15:29:00 2019-10-10 01:42:28

A missing permission check in the review handling of openSUSE Open Build Service before 2.9.3 allowed all authenticated users to modify sources in projects where they do not have write permissions.

Vector

NETWORK

Complexity

LOW

Authentication

SINGLE_INSTANCE

Confidentiality

NONE

Integrity

PARTIAL

Availability

NONE
Opensuse Open build service 2.9.2 (not an official CPE) Opensuse Open build service 2.9.1 (not an official CPE) Opensuse Open build service 2.9.0 (not an official CPE) Opensuse Open build service 2.8.4 (not an official CPE) Opensuse Open build service 2.8.3 (not an official CPE) Opensuse Open build service 2.8.2 (not an official CPE) Opensuse Open build service 2.8.1 (not an official CPE) Opensuse Open build service 2.8.0 (not an official CPE) Opensuse Open build service 2.7.4 (not an official CPE) Opensuse Open build service 2.7.3 (not an official CPE) Opensuse Open build service 2.7.2 (not an official CPE) Opensuse Open build service 2.7.1 (not an official CPE) Opensuse Open build service 2.7.0 (not an official CPE) Opensuse Open build service 2.6.10 (not an official CPE) Opensuse Open build service 2.6.9 (not an official CPE) Opensuse Open build service 2.6.8 (not an official CPE) Opensuse Open build service 2.6.7 (not an official CPE) Opensuse Open build service 2.6.6 (not an official CPE) Opensuse Open build service 2.6.5 (not an official CPE) Opensuse Open build service 2.6.4 (not an official CPE) Opensuse Open build service 2.6.3 (not an official CPE) Opensuse Open build service 2.6.2 (not an official CPE) Opensuse Open build service 2.6.1 (not an official CPE) Opensuse Open build service 2.6.0 (not an official CPE) Opensuse Open build service 2.5.50 (not an official CPE) Opensuse Open build service 2.5.7 (not an official CPE) Opensuse Open build service 2.5.6 (not an official CPE) Opensuse Open build service 2.5.5.1 (not an official CPE) Opensuse Open build service 2.5.5 (not an official CPE) Opensuse Open build service 2.5.4-2 (not an official CPE) Opensuse Open build service 2.5.4-1 (not an official CPE) Opensuse Open build service 2.5.4 (not an official CPE) Opensuse Open build service 2.5.3 (not an official CPE) Opensuse Open build service 2.5.2 (not an official CPE) Opensuse Open build service 2.5.1 (not an official CPE) Opensuse Open build service 2.5.0 (not an official CPE) Opensuse Open build service 2.4.95 (not an official CPE) Opensuse Open build service 2.4.92 (not an official CPE) Opensuse Open build service 2.4.91 (not an official CPE) Opensuse Open build service 2.4.90 (not an official CPE) Opensuse Open build service 2.4.51 (not an official CPE) Opensuse Open build service 2.4.50 (not an official CPE) Opensuse Open build service 2.4.8 (not an official CPE) Opensuse Open build service 2.4.7 (not an official CPE) Opensuse Open build service 2.4.6 (not an official CPE) Opensuse Open build service 2.4.5 (not an official CPE) Opensuse Open build service 2.4.4 (not an official CPE) Opensuse Open build service 2.4.3 (not an official CPE) Opensuse Open build service 2.4.2 (not an official CPE) Opensuse Open build service 2.4.1 (not an official CPE) Opensuse Open build service 2.4.0 (not an official CPE) Opensuse Open build service 2.3.97 (not an official CPE) Opensuse Open build service 2.3.96 (not an official CPE) Opensuse Open build service 2.3.95 (not an official CPE) Opensuse Open build service 2.3.91 (not an official CPE) Opensuse Open build service 2.3.90 (not an official CPE) Opensuse Open build service 2.3.60 (not an official CPE) Opensuse Open build service 2.3.8 (not an official CPE) Opensuse Open build service 2.3.7 (not an official CPE) Opensuse Open build service 2.3.6 (not an official CPE) Opensuse Open build service 2.3.5 (not an official CPE) Opensuse Open build service 2.3.4.1 (not an official CPE) Opensuse Open build service 2.3.4 (not an official CPE) Opensuse Open build service 2.3.3 (not an official CPE) Opensuse Open build service 2.3.2 (not an official CPE) Opensuse Open build service 2.3.1-7 (not an official CPE) Opensuse Open build service 2.3.1 (not an official CPE) Opensuse Open build service 2.3.0 (not an official CPE) Opensuse Open build service 2.1.17 (not an official CPE) Opensuse Open build service 2.1.16 (not an official CPE) Opensuse Open build service 2.1.15 (not an official CPE) Opensuse Open build service 2.1.14 (not an official CPE) Opensuse Open build service 2.1.13 (not an official CPE) Opensuse Open build service 2.1.12 (not an official CPE) Opensuse Open build service 2.1.11 (not an official CPE) Opensuse Open build service 2.1.10 (not an official CPE) Opensuse Open build service 2.1.9 (not an official CPE) Opensuse Open build service 2.1.8.1 (not an official CPE) Opensuse Open build service 2.1.8 (not an official CPE) Opensuse Open build service 2.1.7 (not an official CPE) Opensuse Open build service 2.1.6 (not an official CPE) Opensuse Open build service 2.1.5.1 (not an official CPE) Opensuse Open build service 2.1.5 (not an official CPE) Opensuse Open build service 2.1.4 (not an official CPE) Opensuse Open build service 2.1.3 (not an official CPE) Opensuse Open build service 2.1.2 (not an official CPE) Opensuse Open build service 2.1.1 (not an official CPE) Opensuse Open build service 2.1.0 (not an official CPE) Opensuse Open build service 2.0.106 (not an official CPE) Opensuse Open build service 2.0.104 (not an official CPE) Opensuse Open build service 2.0.103 (not an official CPE) Opensuse Open build service 2.0.16 (not an official CPE) Opensuse Open build service 2.0.8 (not an official CPE) Opensuse Open build service 2.0.7 (not an official CPE) Opensuse Open build service 2.0.6 (not an official CPE) Opensuse Open build service 2.0.5 (not an official CPE) Opensuse Open build service 2.0.4 (not an official CPE) Opensuse Open build service 2.0.3 (not an official CPE) Opensuse Open build service 2.0.2 (not an official CPE) Opensuse Open build service 2.0.1 (not an official CPE) Opensuse Open build service 2.0.0 (not an official CPE) Opensuse Open build service 1.9.92 (not an official CPE) Opensuse Open build service 1.9.91 (not an official CPE) Opensuse Open build service 1.9.90 (not an official CPE) Opensuse Open build service 1.7.7 (not an official CPE) Opensuse Open build service 1.7.6 (not an official CPE) Opensuse Open build service 1.7.5 (not an official CPE) Opensuse Open build service 1.7.4 (not an official CPE) Opensuse Open build service 1.7.3 (not an official CPE) Opensuse Open build service 1.7.2 (not an official CPE) Opensuse Open build service 1.7.0 (not an official CPE) Opensuse Open build service 0.9.5 (not an official CPE) Opensuse Open build service 0.9.4 (not an official CPE) Opensuse Open build service 0.9.3 (not an official CPE) Opensuse Open build service 0.9.2 (not an official CPE) Opensuse Open build service 0.9.1 (not an official CPE) Opensuse Open build service 0.9.0 (not an official CPE) Opensuse Open build service 0.8.0 (not an official CPE) Opensuse Open build service 0.7.0 (not an official CPE) Opensuse Open build service 0.6.0 (not an official CPE) Opensuse Open build service 0.5.3 (not an official CPE) Opensuse Open build service 0.5.2 (not an official CPE) Opensuse Open build service 0.5.1 (not an official CPE) Opensuse Open build service 0.5.0 (not an official CPE) Opensuse Open build service 0.4.2 (not an official CPE) Opensuse Open build service 0.4.0 (not an official CPE) Opensuse Open build service 0.2.3 (not an official CPE)