Lucene search

K
cvelistMicrofocusCVELIST:CVE-2011-4181
HistoryDec 06, 2011 - 12:00 a.m.

CVE-2011-4181 open build service information leak via unauthorized source access

2011-12-0600:00:00
CWE-284
microfocus
www.cve.org
1

4.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

0.003 Low

EPSS

Percentile

69.1%

A vulnerability in open build service allows remote attackers to gain access to source files even though source access is disabled. Affected releases are SUSE open build service up to and including version 2.1.15 (for 2.1) and before version 2.3.

CNA Affected

[
  {
    "product": "open build service",
    "vendor": "SUSE",
    "versions": [
      {
        "lessThanOrEqual": "2.1.15",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "2.3",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

4.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

0.003 Low

EPSS

Percentile

69.1%

Related for CVELIST:CVE-2011-4181