CVE-2011-4181CWE-284

open build service information leak via unauthorized source access

Medium · published June 11, 2018

CVSS v3.0
4.3
EPSS
1%
Percentile
72.9
In the wild
Unconfirmed
What it is

A vulnerability in open build service allows remote attackers to gain access to source files even though source access is disabled. Affected releases are SUSE open build service up to and including version 2.1.15 (for 2.1) and before version 2.3.

The record
Technical detail
CVSS v3.0
4.3 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01441 · 72.9th percentile
Weakness
CWE-284 · Improper Access Control
Published
2018-06-11T15:00Z
EPSS history
Timeline
  • 11 JUN 15:00Z
    open build service information leak via unauthorized source access
    cvelistv5