openSUSE Vulnerabilities and Affected Products
Vulnerabilities associated with Build service.
Products
Clear product- Factory24 vulnerabilities
- Open Build Service13 vulnerabilities
- openSUSE Leap 15.113 vulnerabilities
- Leap 15.18 vulnerabilities
- Tumbleweed7 vulnerabilities
- openSUSE Leap 15.26 vulnerabilities
- openSUSE Leap 15.44 vulnerabilities
- leap3 vulnerabilities
- Leap 15.23 vulnerabilities
- openbuildservice3 vulnerabilities
- openSUSE Tumbleweed3 vulnerabilities
- libeconf2 vulnerabilities
- opensuse2 vulnerabilities
- openSUSE Backports SLE-15-SP32 vulnerabilities
- openSUSE Factory2 vulnerabilities
- openSUSE Leap 15.32 vulnerabilities
- Build service1 vulnerability
- buildservice1 vulnerability
- libsolv1 vulnerability
- obs-service-set_version1 vulnerability
- open-build-service1 vulnerability
- openSUSE Backports SLE-15-SP11 vulnerability
- openSUSE Backports SLE-15-SP21 vulnerability
- openSUSE Backports SLE-15-SP41 vulnerability
- openSUSE Leap Micro 5.21 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2021-36777HIGH | login-proxy sends password to attacker-provided domainA Reliance on Untrusted Inputs in a Security Decision vulnerability in the login proxy of the openSUSE Build service allowed attackers to present users with a expected login form that then sends the clear text credentials to an attacker specified server. This issue affects: openSUSE Build service login-proxy-scripts versions prior to dc000cdfe9b9b715fb92195b1a57559362f689ef. CWE-807Mar 9, 2022 | CVSS8.1v3.1 | EPSS0.91% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |