HIGH🇬🇧 English

CVE-2021-36777

CVSS 8.1v3.1pub. 2022-03-09upd. 2024-11-21

A Reliance on Untrusted Inputs in a Security Decision vulnerability in the login proxy of the openSUSE Build service allowed attackers to present users with a expected login form that then sends the clear text credentials to an attacker specified server. This issue affects: openSUSE Build service login-proxy-scripts versions prior to dc000cdfe9b9b715fb92195b1a57559362f689ef.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

  • Opensuse Open Build Service

    APP
    Opensuse
    < 2021-10-08
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
CWE
Referencje

Powiązane podatności

CVE-2022-21949HIGH8.8ten sam produkt

A Improper Restriction of XML External Entity Reference vulnerability in SUSE Open Build Service allows remote...

CVE-2019-3685HIGH7.4ten sam produkt

Open Build Service before version 0.165.4 diddn't validate TLS certificates for HTTPS connections with the osc...

CVE-2011-4181HIGH7.5ten sam produkt

A vulnerability in open build service allows remote attackers to gain access to source files even though sourc...

CVE-2014-0594HIGH8.8ten sam produkt

In the Open Build Service (OBS) before version 2.4.6 the CSRF protection is incorrectly disabled in the web in...

CVE-2014-0593HIGH7.8ten sam produkt

The set_version script as shipped with obs-service-set_version is a source validator for the Open Build Servic...