Unscored severity · published Apr 10, 2011
CVE-2011-0466
The API in SUSE openSUSE Build Service (OBS) 2.0.x before 2.0.8 and 2.1.x before 2.1.6 allows attackers to bypass intended write-access restrictions and modify a (1) package or…
–
CVSS
1.1%
EPSS
No
On KEV
Description
The API in SUSE openSUSE Build Service (OBS) 2.0.x before 2.0.8 and 2.1.x before 2.1.6 allows attackers to bypass intended write-access restrictions and modify a (1) package or (2) project via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 65% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OB
Opensuse Build Service · Novell
2.0; 2.0.0; 2.0.1; 2.0.2; 2.0.3; 2.0.4; +15 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-0466
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-0466
Vendor Advisory
http://news.opensuse.org/2011/03/02/build-service-team-releases-new-versions-fixing-security-problems/
More from Opensuse Build Service
–
CVE-2011-0462
Multiple cross-site scripting (XSS) vulnerabilities in the login page in the webui component in SUSE openSUSE Build Service (OBS) before 2.1.6 allow remote attackers to inject…