What is CVE-2017-5188?

CVE-2017-5188 is a medium-severity vulnerability in Opensuse Open Build Service, classified under Improper Link Resolution Before File Access. CVSS score: 5.0/10. Published 2018-03-01.

How severe is CVE-2017-5188?

Medium severity. CVSS v3 base score is 5.0 out of 10.

Information disclosure in Opensuse Open Build Service

CVE-2017-5188

The bs_worker code in open build service before 20170320 followed relative symlinks, allowing reading of files outside of the package source directory during build, allowing leakage of private information.

EPSS: 0.012 (63.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.0 (Medium). Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N.

Affected products

Opensuse Open Build Service — versions unspecified
Opensuse Open_build_service

Weakness classification (CWE)

References

security@opentext.com (x_refsource_CONFIRM)
security@opentext.com (x_refsource_CONFIRM)
security@opentext.com (x_refsource_CONFIRM)

Frequently asked questions

What is CVE-2017-5188?: CVE-2017-5188 is a medium-severity vulnerability in Opensuse Open Build Service, classified under Improper Link Resolution Before File Access. CVSS score: 5.0/10. Published 2018-03-01.
How severe is CVE-2017-5188?: Medium severity. CVSS v3 base score is 5.0 out of 10.