2018-06-07 15:29:00 2019-10-10 01:42:28

Lack of permission checks in the InitializeDevelPackage function in openSUSE Open Build Service before 2.9.3 allowed authenticated users to modify packages where they do not have write permissions.

Vector

NETWORK

Complexity

LOW

Authentication

SINGLE_INSTANCE

Confidentiality

NONE

Integrity

PARTIAL

Availability

NONE
Opensuse Open build service 2.9.2 (not an official CPE) Opensuse Open build service 2.9.1 (not an official CPE) Opensuse Open build service 2.9.0 (not an official CPE) Opensuse Open build service 2.8.4 (not an official CPE) Opensuse Open build service 2.8.3 (not an official CPE) Opensuse Open build service 2.8.2 (not an official CPE) Opensuse Open build service 2.8.1 (not an official CPE) Opensuse Open build service 2.8.0 (not an official CPE) Opensuse Open build service 2.7.4 (not an official CPE) Opensuse Open build service 2.7.3 (not an official CPE) Opensuse Open build service 2.7.2 (not an official CPE) Opensuse Open build service 2.7.1 (not an official CPE) Opensuse Open build service 2.7.0 (not an official CPE) Opensuse Open build service 2.6.10 (not an official CPE) Opensuse Open build service 2.6.9 (not an official CPE) Opensuse Open build service 2.6.8 (not an official CPE) Opensuse Open build service 2.6.7 (not an official CPE) Opensuse Open build service 2.6.6 (not an official CPE) Opensuse Open build service 2.6.5 (not an official CPE) Opensuse Open build service 2.6.4 (not an official CPE) Opensuse Open build service 2.6.3 (not an official CPE) Opensuse Open build service 2.6.2 (not an official CPE) Opensuse Open build service 2.6.1 (not an official CPE) Opensuse Open build service 2.6.0 (not an official CPE) Opensuse Open build service 2.5.50 (not an official CPE) Opensuse Open build service 2.5.7 (not an official CPE) Opensuse Open build service 2.5.6 (not an official CPE) Opensuse Open build service 2.5.5.1 (not an official CPE) Opensuse Open build service 2.5.5 (not an official CPE) Opensuse Open build service 2.5.4-2 (not an official CPE) Opensuse Open build service 2.5.4-1 (not an official CPE) Opensuse Open build service 2.5.4 (not an official CPE) Opensuse Open build service 2.5.3 (not an official CPE) Opensuse Open build service 2.5.2 (not an official CPE) Opensuse Open build service 2.5.1 (not an official CPE) Opensuse Open build service 2.5.0 (not an official CPE) Opensuse Open build service 2.4.95 (not an official CPE) Opensuse Open build service 2.4.92 (not an official CPE) Opensuse Open build service 2.4.91 (not an official CPE) Opensuse Open build service 2.4.90 (not an official CPE) Opensuse Open build service 2.4.51 (not an official CPE) Opensuse Open build service 2.4.50 (not an official CPE) Opensuse Open build service 2.4.8 (not an official CPE) Opensuse Open build service 2.4.7 (not an official CPE) Opensuse Open build service 2.4.6 (not an official CPE) Opensuse Open build service 2.4.5 (not an official CPE) Opensuse Open build service 2.4.4 (not an official CPE) Opensuse Open build service 2.4.3 (not an official CPE) Opensuse Open build service 2.4.2 (not an official CPE) Opensuse Open build service 2.4.1 (not an official CPE) Opensuse Open build service 2.4.0 (not an official CPE) Opensuse Open build service 2.3.97 (not an official CPE) Opensuse Open build service 2.3.96 (not an official CPE) Opensuse Open build service 2.3.95 (not an official CPE) Opensuse Open build service 2.3.91 (not an official CPE) Opensuse Open build service 2.3.90 (not an official CPE) Opensuse Open build service 2.3.60 (not an official CPE) Opensuse Open build service 2.3.8 (not an official CPE) Opensuse Open build service 2.3.7 (not an official CPE) Opensuse Open build service 2.3.6 (not an official CPE) Opensuse Open build service 2.3.5 (not an official CPE) Opensuse Open build service 2.3.4.1 (not an official CPE) Opensuse Open build service 2.3.4 (not an official CPE) Opensuse Open build service 2.3.3 (not an official CPE) Opensuse Open build service 2.3.2 (not an official CPE) Opensuse Open build service 2.3.1-7 (not an official CPE) Opensuse Open build service 2.3.1 (not an official CPE) Opensuse Open build service 2.3.0 (not an official CPE) Opensuse Open build service 2.1.17 (not an official CPE) Opensuse Open build service 2.1.16 (not an official CPE) Opensuse Open build service 2.1.15 (not an official CPE) Opensuse Open build service 2.1.14 (not an official CPE) Opensuse Open build service 2.1.13 (not an official CPE) Opensuse Open build service 2.1.12 (not an official CPE) Opensuse Open build service 2.1.11 (not an official CPE) Opensuse Open build service 2.1.10 (not an official CPE) Opensuse Open build service 2.1.9 (not an official CPE) Opensuse Open build service 2.1.8.1 (not an official CPE) Opensuse Open build service 2.1.8 (not an official CPE) Opensuse Open build service 2.1.7 (not an official CPE) Opensuse Open build service 2.1.6 (not an official CPE) Opensuse Open build service 2.1.5.1 (not an official CPE) Opensuse Open build service 2.1.5 (not an official CPE) Opensuse Open build service 2.1.4 (not an official CPE) Opensuse Open build service 2.1.3 (not an official CPE) Opensuse Open build service 2.1.2 (not an official CPE) Opensuse Open build service 2.1.1 (not an official CPE) Opensuse Open build service 2.1.0 (not an official CPE) Opensuse Open build service 2.0.106 (not an official CPE) Opensuse Open build service 2.0.104 (not an official CPE) Opensuse Open build service 2.0.103 (not an official CPE) Opensuse Open build service 2.0.16 (not an official CPE) Opensuse Open build service 2.0.8 (not an official CPE) Opensuse Open build service 2.0.7 (not an official CPE) Opensuse Open build service 2.0.6 (not an official CPE) Opensuse Open build service 2.0.5 (not an official CPE) Opensuse Open build service 2.0.4 (not an official CPE) Opensuse Open build service 2.0.3 (not an official CPE) Opensuse Open build service 2.0.2 (not an official CPE) Opensuse Open build service 2.0.1 (not an official CPE) Opensuse Open build service 2.0.0 (not an official CPE) Opensuse Open build service 1.9.92 (not an official CPE) Opensuse Open build service 1.9.91 (not an official CPE) Opensuse Open build service 1.9.90 (not an official CPE) Opensuse Open build service 1.7.7 (not an official CPE) Opensuse Open build service 1.7.6 (not an official CPE) Opensuse Open build service 1.7.5 (not an official CPE) Opensuse Open build service 1.7.4 (not an official CPE) Opensuse Open build service 1.7.3 (not an official CPE) Opensuse Open build service 1.7.2 (not an official CPE) Opensuse Open build service 1.7.0 (not an official CPE) Opensuse Open build service 0.9.5 (not an official CPE) Opensuse Open build service 0.9.4 (not an official CPE) Opensuse Open build service 0.9.3 (not an official CPE) Opensuse Open build service 0.9.2 (not an official CPE) Opensuse Open build service 0.9.1 (not an official CPE) Opensuse Open build service 0.9.0 (not an official CPE) Opensuse Open build service 0.8.0 (not an official CPE) Opensuse Open build service 0.7.0 (not an official CPE) Opensuse Open build service 0.6.0 (not an official CPE) Opensuse Open build service 0.5.3 (not an official CPE) Opensuse Open build service 0.5.2 (not an official CPE) Opensuse Open build service 0.5.1 (not an official CPE) Opensuse Open build service 0.5.0 (not an official CPE) Opensuse Open build service 0.4.2 (not an official CPE) Opensuse Open build service 0.4.0 (not an official CPE) Opensuse Open build service 0.2.3 (not an official CPE)