CVE-2011-0462

The CVE-2011-0462 entry covers multiple reflected XSS vulnerabilities in the login page of the SUSE/openSUSE Build Service (OBS) webui prior to version 2.1.6. Affected component: webui login page. Root cause details are not expanded beyond XSS in the provided documents, but the exploitation goal ...

CVE-2011-0466

The CVE-2011-0466 affects SUSE openSUSE Build Service (OBS) versions 2.0.x before 2.0.8 and 2.1.x before 2.1.6. The issue allows attackers to bypass write-access restrictions and modify a (1) package or (2) project via unspecified vectors. Remediation per connected sources is to upgrade to the fi...

CVE-2011-0466

The API in SUSE openSUSE Build Service OBS 2.0.x before 2.0.8 and 2.1.x before 2.1.6 allows attackers to bypass intended write-access restrictions and modify a 1 package or 2 project via unspecified vectors...