CVE-2018-12466

MEDIUM

openSUSE openbuildservice <9.2.4 - Privilege Escalation

Title source: llm

openSUSE openbuildservice before 9.2.4 allowed authenticated users to delete packages on specific projects with project links.

Core 3

Core References

Patch x_refsource_confirm

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

Issue Tracking x_refsource_confirm

CVSS v3 4.4

EPSS 0.0018

EPSS Percentile 38.7%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N

CWE

CWE-285 CWE-732

Status published

Products (1)

opensuse/open_build_service < 9.2.4

Published Aug 01, 2018

Tracked Since Feb 18, 2026