← All advisories

High severity8.8NVD Advisory· Published Jan 2, 2020· Updated Jun 16, 2026

CVE-2010-3782

CVE-2010-3782

Description

obs-server before 1.7.7 allows logins by 'unconfirmed' accounts due to a bug in the REST api implementation.

Affected products

4

Obs Server/Obs Server
cpe:2.3:a:obs-server:obs-server:*:*:*:*:*:*:*:*
Range: <1.7.7
SUSE S.A./Linux Enterprise Server
cpe:2.3:o:suse:linux_enterprise_server:11:sp1:*:*:*:*:*:*
obs-server/obs-serverdescription
OpenSUSE/obs-serverllm-fuzzy
Range: <1.7.7

Patches

Vulnerability mechanics

References

1

lists.opensuse.org/opensuse-security-announce/2011-02/msg00001.htmlnvdThird Party Advisory

News mentions

0

No linked articles in our index yet.