CVE-2011-4181mediumCWE-284

CVE-2011-4181: falha de média gravidade em SUSE open build service

open build service information leak via unauthorized source access

Publicada em · Atualizada em

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 4.3epss 1.4%
probabilidade de exploração
1.4%top 27% das CVEs
exploração observada
nãonenhuma fonte reporta
A vulnerability in open build service allows remote attackers to gain access to source files even though source access is disabled. Affected releases are SUSE open build service up to and including version 2.1.15 (for 2.1) and before version 2.3.
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Produtos afetados
SUSE · open build service
CVEs relacionadas — SUSE open build service

No mesmo produto, das mais perigosas para as menos.

CVE-2011-4183MEDIUMopen build service allows anyone to upload rpmsEPSS 1.6%CVE-2015-0796MEDIUMopen build service source server symlink exploitation via source patchEPSS 0.9%CVE-2017-9268MEDIUMopen-build-service retrigger / wipebinaries hitting the wrong project bypassing access permissionsEPSS 0.6%
Referências
https://bugzilla.suse.com/show_bug.cgi?id=734003https://github.com/openSUSE/open-build-service/commit/5281e4bff9df31f1f91e22a0d1e9086b93b23d7e