Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2020-8021

unauthorized read access to files where sourceaccess is disabled via a crafted _service file in Open Build Service

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
suse

Description

a Improper Access Control vulnerability in of Open Build Service allows remote attackers to read files of an OBS package where the sourceaccess/access is disabled This issue affects: Open Build Service versions prior to 2.10.5.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

openSUSE Open Build Service

  • Open Build Service to < 2.10.5affected

References