CVE-2017-14806 — Insecure handling of repodata and packages in SUSE Studio onlite

CVE-2017-14806

Insecure handling of repodata and packages in SUSE Studio onlite PUBLISHED

Description (CNA)

A Improper Certificate Validation vulnerability in susestudio-common of SUSE Studio onsite allows remote attackers to MITM connections to the repositories, which allows the modification of packages received over these connections. This issue affects: SUSE Studio onsite susestudio-common version 1.3.17-56.6.3 and prior versions.

Affected (CNA)

Vendor / product	Versions
SUSE / Studio onsite	affected susestudio-common through 1.3.17-56.6.3

CWE

CWE-295

References

https://bugzilla.suse.com/show_bug.cgi?id=1065397

ADP enrichment

CVE

No English description supplied.

https://bugzilla.suse.com/show_bug.cgi?id=1065397