CVE-2010-3782: Obs-Server

High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days.

obs-server before 1.7.7 allows logins by 'unconfirmed' accounts due to a bug in the REST api implementation.

Affected products

• Obs-Server Obs-Server: before 1.7.7 (fixed in 1.7.7)
• Suse Linux Enterprise Server: version 11 only

Published 2020-01-02. Last modified 2026-06-16.