CVE-2018-12467

2018-08-0115:29:00

Google

osv.dev

6.7 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

31.1%

JSON

Authorized users of the openbuildservice before 2.9.4 could delete packages by using a malicious request against projects having the OBS:InitializeDevelPackage attribute, a similar issue to CVE-2018-7689.

CPENameOperatorVersion
open-build-serviceeq2.9.1
open-build-serviceeq2.3.90
open-build-serviceeq2.4.50
open-build-serviceeq1.9.90
open-build-serviceeq2.9.3
open-build-serviceeq2.3.91
open-build-serviceeq2.4.51
open-build-serviceeq2.5.50
open-build-serviceeq2.9.0
open-build-serviceeq2.9.2

Name	Operator	Version
open-build-service	eq	2.9.1
open-build-service	eq	2.3.90
open-build-service	eq	2.4.50
open-build-service	eq	1.9.90
open-build-service	eq	2.9.3
open-build-service	eq	2.3.91
open-build-service	eq	2.4.51
open-build-service	eq	2.5.50
open-build-service	eq	2.9.0
open-build-service	eq	2.9.2