PT-2018-4094

Name of the Vulnerable Software and Affected Versions Open Build Service API versions prior to 2.4.4 Description The issue concerns a missing write permission check in the controller of the Open Build Service API. This allows an authenticated attacker to modify user roles associated with packages...