Skip to content
OpenAdvisories
Low · 3.7 CVE-2017-14806 EUVD-2017-6295GHSA-94gx-rm2c-cw59

Insecure handling of repodata and packages in SUSE Studio onlite

Published Jan 27, 2020 · Updated Sep 16, 2024 · Assigned by microfocus

Description

A Improper Certificate Validation vulnerability in susestudio-common of SUSE Studio onsite allows remote attackers to MITM connections to the repositories, which allows the modification of packages received over these connections. This issue affects: SUSE Studio onsite susestudio-common version 1.3.17-56.6.3 and prior versions.

Affected products

VendorProductAffectedFixed
SUSE Studio onsite susestudio-common – ≤ 1.3.17-56.6.3 —

References