high8.8
CVE-2010-3782
obs-server before 1.7.7 allows logins by 'unconfirmed' accounts due to a bug in the REST api implementation.
Impact
obs-server before 1.7.7 allows logins by 'unconfirmed' accounts due to a bug in the REST api implementation.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Obs-Server | Obs-Server | before 1.7.7 |
| Suse | Linux Enterprise Server | Version 11 |