Bypassing Write-Access Restrictions in SUSE openSUSE Build Service (OBS) API

Bypassing Write-Access Restrictions in SUSE openSUSE Build Service (OBS) API

CVE-2011-0466 · MEDIUM Severity

AV:N/AC:L/AU:N/C:N/I:P/A:P

The API in SUSE openSUSE Build Service (OBS) 2.0.x before 2.0.8 and 2.1.x before 2.1.6 allows attackers to bypass intended write-access restrictions and modify a (1) package or (2) project via unspecified vectors.

Learn more about our Cis Benchmark Audit For Suse Linux Enterprise Server.