CVE-2018-12473 in Open Build Service信息

摘要

由 MITRE

A path traversal traversal vulnerability in obs-service-tar_scm of Open Build Service allows remote attackers to cause access files not in the current build. On the server itself this is prevented by confining the worker via KVM. Affected releases are openSUSE Open Build Service: versions prior to 70d1aa4cc4d7b940180553a63805c22fc62e2cf0.

Once again VulDB remains the best source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

负责

SUSE

预定

2018-06-15

披露

2018-10-02

管理

已接受

条目

VDB-124674

CPE

准备好

CWE

CWE-22 (已确认)

CVSS

7.5 (NVD)

EPSS

0.01817

KEV

否

活动

非常低

来源

MITRE	https://www.cve.org/CVERecord?id=CVE-2018-12473
NVD	https://nvd.nist.gov/vuln/detail/CVE-2018-12473
CVE Details	https://www.cvedetails.com/cve/CVE-2018-12473/

◂ 上一步一览下一步 ▸

Do you need the next level of professionalism?

Upgrade your account now!