CVE-2017-9268

MEDIUM

openSUSE open_build_service < 2.8.2 - Authenticated Denial of Service via Incorrect Permission Check

Title source: llm
STIX 2.1

Description

In the open build service before 201707022 the wipetrigger and rebuild actions checked the wrong project for permissions, allowing authenticated users to cause operations on projects where they did not have permissions leading to denial of service (resource consumption).

References (2)

Core 2
Core References
Issue Tracking x_refsource_confirm
https://bugzilla.suse.com/show_bug.cgi?id=1045519

Scores

CVSS v3 4.4
EPSS 0.0061
EPSS Percentile 44.6%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

Details

CWE
CWE-285 CWE-732
Status published
Products (1)
opensuse/open_build_service < 2.8.2
Published Mar 01, 2018
Tracked Since Feb 18, 2026