ZeroHour

CVE-2017-9268

CVSS 3.0
6.5 medium
EPSS
<1%p47
Published
()
Modified
Description

In the open build service before 201707022 the wipetrigger and rebuild actions checked the wrong project for permissions, allowing authenticated users to cause operations on projects where they did not have permissions leading to denial of service (resource consumption).

Vendors
opensuse
Products
open build service
Weakness
CWE-285, CWE-732
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

In the news

No ingested article mentions this CVE yet.