CVE-2018-7689

—

CVSS 3.0

6.5 medium

EPSS

1%p67

Published

Jun 7, 2018 (Jun 7, 2018)

Modified

Jun 17, 2026

Description

Lack of permission checks in the InitializeDevelPackage function in openSUSE Open Build Service before 2.9.3 allowed authenticated users to modify packages where they do not have write permissions.

Vendors: opensuse
Products: open build service
Weakness: CWE-862
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (1.2%)

In the news0 stories

No ingested article mentions this CVE yet.