CVE-2020-8021

2020-05-1915:15:12

Google

osv.dev

6.6 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

61.3%

JSON

a Improper Access Control vulnerability in of Open Build Service allows remote attackers to read files of an OBS package where the sourceaccess/access is disabled This issue affects: Open Build Service versions prior to 2.10.5.

CPENameOperatorVersion
open-build-serviceeq2.10
open-build-serviceeq1.9.91
open-build-serviceeq1.9.90
open-build-serviceeq2.5.50
open-build-serviceeq2.10.3
open-build-serviceeq2.4.51
open-build-serviceeq2.10.2
open-build-serviceeq2.3.60
open-build-serviceeq1.9.92
open-build-serviceeq2.10.0

Name	Operator	Version
open-build-service	eq	2.10
open-build-service	eq	1.9.91
open-build-service	eq	1.9.90
open-build-service	eq	2.5.50
open-build-service	eq	2.10.3
open-build-service	eq	2.4.51
open-build-service	eq	2.10.2
open-build-service	eq	2.3.60
open-build-service	eq	1.9.92
open-build-service	eq	2.10.0