Vulnerabilities > CVE-2018-7689 - Missing Authorization vulnerability in Opensuse Open Build Service

CVSS 6.5 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

NONE

Integrity impact

HIGH

Availability impact

NONE

network

low complexity

opensuse

CWE-862

NVD

Published: 2018-06-07

Updated: 2024-11-21

Summary

Lack of permission checks in the InitializeDevelPackage function in openSUSE Open Build Service before 2.9.3 allowed authenticated users to modify packages where they do not have write permissions.

Vulnerable Configurations

Part	Description	Count
Application	Opensuse Opensuse Open Build Service - Opensuse Open Build Service 0.2.3 Opensuse Open Build Service 0.4.0 Opensuse Open Build Service 0.4.2 Opensuse Open Build Service 0.5.0 Opensuse Open Build Service 0.5.1 Opensuse Open Build Service 0.5.2 Opensuse Open Build Service 0.5.3 Opensuse Open Build Service 0.6.0 Opensuse Open Build Service 0.7.0 Opensuse Open Build Service 0.8.0 Opensuse Open Build Service 0.9.0 Opensuse Open Build Service 0.9.1 Opensuse Open Build Service 0.9.2 Opensuse Open Build Service 0.9.3 Opensuse Open Build Service 0.9.4 Opensuse Open Build Service 0.9.5 Opensuse Open Build Service 0.165.4 Opensuse Open Build Service 1.7.0 Opensuse Open Build Service 1.7.2 Opensuse Open Build Service 1.7.3 Opensuse Open Build Service 1.7.4 Opensuse Open Build Service 1.7.5 Opensuse Open Build Service 1.7.6 Opensuse Open Build Service 1.7.7 Opensuse Open Build Service 1.9.90 Opensuse Open Build Service 1.9.91 Opensuse Open Build Service 1.9.92 Opensuse Open Build Service 2.0.0 Opensuse Open Build Service 2.0.1 Opensuse Open Build Service 2.0.2 Opensuse Open Build Service 2.0.3 Opensuse Open Build Service 2.0.4 Opensuse Open Build Service 2.0.5 Opensuse Open Build Service 2.0.6 Opensuse Open Build Service 2.0.7 Opensuse Open Build Service 2.0.8 Opensuse Open Build Service 2.0.16 Opensuse Open Build Service 2.0.103 Opensuse Open Build Service 2.0.104 Opensuse Open Build Service 2.0.106 Opensuse Open Build Service 2.1.0 Opensuse Open Build Service 2.1.1 Opensuse Open Build Service 2.1.2 Opensuse Open Build Service 2.1.3 Opensuse Open Build Service 2.1.4 Opensuse Open Build Service 2.1.5 Opensuse Open Build Service 2.1.5.1 Opensuse Open Build Service 2.1.6 Opensuse Open Build Service 2.1.7 Opensuse Open Build Service 2.1.8 Opensuse Open Build Service 2.1.8.1 Opensuse Open Build Service 2.1.9 Opensuse Open Build Service 2.1.10 Opensuse Open Build Service 2.1.11 Opensuse Open Build Service 2.1.12 Opensuse Open Build Service 2.1.13 Opensuse Open Build Service 2.1.14 Opensuse Open Build Service 2.1.15 Opensuse Open Build Service 2.1.16 Opensuse Open Build Service 2.1.17 Opensuse Open Build Service 2.3.0 Opensuse Open Build Service 2.3.1 Opensuse Open Build Service 2.3.1-7 Opensuse Open Build Service 2.3.2 Opensuse Open Build Service 2.3.3 Opensuse Open Build Service 2.3.4 Opensuse Open Build Service 2.3.4.1 Opensuse Open Build Service 2.3.5 Opensuse Open Build Service 2.3.6 Opensuse Open Build Service 2.3.7 Opensuse Open Build Service 2.3.8 Opensuse Open Build Service 2.3.60 Opensuse Open Build Service 2.3.90 Opensuse Open Build Service 2.3.91 Opensuse Open Build Service 2.3.95 Opensuse Open Build Service 2.3.96 Opensuse Open Build Service 2.3.97 Opensuse Open Build Service 2.4.0 Opensuse Open Build Service 2.4.1 Opensuse Open Build Service 2.4.2 Opensuse Open Build Service 2.4.3 Opensuse Open Build Service 2.4.4 Opensuse Open Build Service 2.4.5 Opensuse Open Build Service 2.4.6 Opensuse Open Build Service 2.4.7 Opensuse Open Build Service 2.4.8 Opensuse Open Build Service 2.4.50 Opensuse Open Build Service 2.4.51 Opensuse Open Build Service 2.4.90 Opensuse Open Build Service 2.4.91 Opensuse Open Build Service 2.4.92 Opensuse Open Build Service 2.4.95 Opensuse Open Build Service 2.5.0 Opensuse Open Build Service 2.5.1 Opensuse Open Build Service 2.5.2 Opensuse Open Build Service 2.5.3 Opensuse Open Build Service 2.5.4 Opensuse Open Build Service 2.5.4-1 Opensuse Open Build Service 2.5.4-2 Opensuse Open Build Service 2.5.5 Opensuse Open Build Service 2.5.5.1 Opensuse Open Build Service 2.5.6 Opensuse Open Build Service 2.5.7 Opensuse Open Build Service 2.5.50 Opensuse Open Build Service 2.6.0 Opensuse Open Build Service 2.6.1 Opensuse Open Build Service 2.6.2 Opensuse Open Build Service 2.6.3 Opensuse Open Build Service 2.6.4 Opensuse Open Build Service 2.6.5 Opensuse Open Build Service 2.6.6 Opensuse Open Build Service 2.6.7 Opensuse Open Build Service 2.6.8 Opensuse Open Build Service 2.6.9 Opensuse Open Build Service 2.6.10 Opensuse Open Build Service 2.7.0 Opensuse Open Build Service 2.7.1 Opensuse Open Build Service 2.7.2 Opensuse Open Build Service 2.7.3 Opensuse Open Build Service 2.7.4 Opensuse Open Build Service 2.8.0 Opensuse Open Build Service 2.8.1 Opensuse Open Build Service 2.8.2 Opensuse Open Build Service 2.8.3 Opensuse Open Build Service 2.8.4 Opensuse Open Build Service 2.9.0 Opensuse Open Build Service 2.9.1 Opensuse Open Build Service 2.9.2	129

Common Weakness Enumeration (CWE)

CWE-862 - Missing Authorization

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References