CVE-2019-3685

Open Build Service before version 0.165.4 diddn't validate TLS certificates for HTTPS connections with the osc client binary

Score

CVSS 3.1 7.7 High

Status

Modified - meissner@suse.de

Published

2019-11-05

Last modified

2024-09-16

Weaknesses

CWE-295

Affected products

• Open Build Service (Open Build Service)
• Open Build Service (Opensuse)

References

• https://bugzilla.suse.com/show_bug.cgi?id=1142518