CVE-2017-14806CWE-295

Insecure handling of repodata and packages in SUSE Studio onlite

Low · published January 27, 2020

CVSS v3.1
3.7
EPSS
0%
Percentile
37.6
In the wild
Unconfirmed
What it is

A Improper Certificate Validation vulnerability in susestudio-common of SUSE Studio onsite allows remote attackers to MITM connections to the repositories, which allows the modification of packages received over these connections. This issue affects: SUSE Studio onsite susestudio-common version 1.3.17-56.6.3 and prior versions.

The record
Technical detail
CVSS v3.1
3.7 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00444 · 37.6th percentile
Weakness
CWE-295 · Improper Certificate Validation
Published
2020-01-27T09:45Z
EPSS history
Timeline
  • 27 JAN 09:45Z
    Insecure handling of repodata and packages in SUSE Studio onlite
    cvelistv5