CVE-2017-14807

CVE-2017-14807 is an SQL injection vulnerability in SUSE Studio onsite susestudio-ui-server (affected: version 1.3.17-56.6.3 and prior). The issue is described as Improper Neutralization of Special Elements used in an SQL Command, enabling remote attackers with admin privileges in Studio to alter...

CVE-2017-14806

CVE-2017-14806 concerns an Improper Certificate Validation in SUSE Studio onsite’s susestudio-common, affecting version 1.3.17-56.6.3 and earlier. The vulnerability could allow remote attackers to perform MITM on repository connections, enabling modification of delivered packages. Connected docum...