CVE-2011-4183CWE-862

open build service allows anyone to upload rpms

Medium · published June 13, 2018

CVSS v3.0
6.5
EPSS
2%
Percentile
74.9
In the wild
Unconfirmed
What it is

A vulnerability in open build service allows remote attackers to upload arbitrary RPM files. Affected releases are SUSE open build service prior to 2.1.16.

The record
Technical detail
CVSS v3.0
6.5 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.01550 · 74.9th percentile
Weakness
CWE-862 · Missing Authorization
Published
2018-06-13T13:00Z
EPSS history
Timeline
  • 13 JUN 13:00Z
    open build service allows anyone to upload rpms
    cvelistv5