Vulnerability Details CVE-2018-12476
Relative Path Traversal vulnerability in obs-service-tar_scm of SUSE Linux Enterprise Server 15; openSUSE Factory allows remote attackers with control over a repository to overwrite files on the machine of the local user if a malicious service is executed. This issue affects: SUSE Linux Enterprise Server 15 obs-service-tar_scm versions prior to 0.9.2.1537788075.fefaa74:. openSUSE Factory obs-service-tar_scm versions prior to 0.9.2.1537788075.fefaa74.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 48.7%
CVSS Severity
CVSS v3 Score 4.3
CVSS v2 Score 6.4
References
Products affected by CVE-2018-12476
-
cpe:2.3:a:suse:obs-service-tar_scm:-
-
cpe:2.3:o:suse:opensuse_factory:-
-
cpe:2.3:o:suse:suse_linux_enterprise_server:15