medium4.4
CVE-2018-12466
openSUSE openbuildservice before 9.2.4 allowed authenticated users to delete packages on specific projects with project links.
Impact
openSUSE openbuildservice before 9.2.4 allowed authenticated users to delete packages on specific projects with project links.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Opensuse | Open Build Service | before 9.2.4 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/104958
- https://bugzilla.suse.com/show_bug.cgi?id=CVE-2018-12466
- https://github.com/openSUSE/open-build-service/commit/f57b660f49f830006766a8d4abc3b4af6e178063
- http://www.securityfocus.com/bid/104958
- https://bugzilla.suse.com/show_bug.cgi?id=CVE-2018-12466
- https://github.com/openSUSE/open-build-service/commit/f57b660f49f830006766a8d4abc3b4af6e178063