CVE-2018-12466

openSUSE openbuildservice before 9.2.4 allowed authenticated users to delete packages on specific projects with project links.

Score

CVSS 3.0 6.5 Medium

Status

Modified - security@opentext.com

Published

2018-08-01

Last modified

2024-09-17

Weaknesses

CWE-285, CWE-732

Affected products

• Open Build Service (Opensuse)
• Openbuildservice (Opensuse)

References

• http://www.securityfocus.com/bid/104958
• https://bugzilla.suse.com/show_bug.cgi?id=CVE-2018-12466
• https://github.com/openSUSE/open-build-service/commit/f57b660f49f830006766a8d4abc3b4af6e178063