CVE-2018-7689

2018-06-0713:29:00

Google

osv.dev

0.001 Low

EPSS

Percentile

31.1%

JSON

Lack of permission checks in the InitializeDevelPackage function in openSUSE Open Build Service before 2.9.3 allowed authenticated users to modify packages where they do not have write permissions.

CPENameOperatorVersion
open-build-serviceeq2.9.1
open-build-serviceeq2.3.90
open-build-serviceeq2.4.50
open-build-serviceeq1.9.90
open-build-serviceeq2.3.91
open-build-serviceeq2.4.51
open-build-serviceeq2.5.50
open-build-serviceeq2.9.0
open-build-serviceeq2.9.2
open-build-serviceeq2.3.60

Name	Operator	Version
open-build-service	eq	2.9.1
open-build-service	eq	2.3.90
open-build-service	eq	2.4.50
open-build-service	eq	1.9.90
open-build-service	eq	2.3.91
open-build-service	eq	2.4.51
open-build-service	eq	2.5.50
open-build-service	eq	2.9.0
open-build-service	eq	2.9.2
open-build-service	eq	2.3.60