Security Advisory

CVE-2013-3703

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-06-08 17:00:00

Last updated 2024-09-17 02:21:03

Assigner microfocus

CVSS score 8.8

State PUBLISHED

Description

The controller of the Open Build Service API prior to version 2.4.4 is missing a write permission check, allowing an authenticated attacker to add or remove user roles from packages and/or project meta data.

← Browse all CVEs View on cve.org ↗