VULNERABILITY INTELLIGENCE
CVE-2017-9268
CVSS score4.4 MEDIUM
EPSS probability0.60%
CISA KEVNot currently listed
Published2018-03-01
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Description
In the open build service before 201707022 the wipetrigger and rebuild actions checked the wrong project for permissions, allowing authenticated users to cause operations on projects where they did not have permissions leading to denial of service (resource consumption).
Weakness classification
- CWE-285: Improper Authorization
- CWE-732: Incorrect Permission Assignment for Critical Resource