VULNERABILITY INTELLIGENCE
CVE-2018-7689
CVSS score7.1 HIGH
EPSS probability1.21%
CISA KEVNot currently listed
Published2018-06-07
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L
Description
Lack of permission checks in the InitializeDevelPackage function in openSUSE Open Build Service before 2.9.3 allowed authenticated users to modify packages where they do not have write permissions.
Weakness classification
- CWE-862: Missing Authorization