What is CVE-2017-9268?

CVE-2017-9268 is a medium-severity vulnerability in openSUSE Open Build Service, classified under Improper Authorization. CVSS score: 4.4/10. Published 2018-03-01.

How severe is CVE-2017-9268?

Medium severity. CVSS v3 base score is 4.4 out of 10.

Auth bypass in openSUSE Open Build Service

CVE-2017-9268

In the open build service before 201707022 the wipetrigger and rebuild actions checked the wrong project for permissions, allowing authenticated users to cause operations on projects where they did not have permissions leading to denial of service (resource consumption).

Published 2018-03-01 · last modified 2026-06-17.

CVSS v3 metric

CVSS v3 base score 4.4 (Medium). Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L.

EPSS exploit prediction

EPSS: 0.006 (46.6th percentile), scored 2026-09-29.

Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 47th percentile — 46.6% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.006 · newest: 0.006 · change: 0.000

Affected products

openSUSE Open Build Service
SUSE Open Build Service — versions unspecified

Weakness classification (CWE)

References

Frequently asked questions

What is CVE-2017-9268?: CVE-2017-9268 is a medium-severity vulnerability in openSUSE Open Build Service, classified under Improper Authorization. CVSS score: 4.4/10. Published 2018-03-01.
How severe is CVE-2017-9268?: Medium severity. CVSS v3 base score is 4.4 out of 10.