CVE-2020-8021: Debian Linux

Medium severity, CVSS 5.3. EPSS: 1.3% chance of exploitation in the next 30 days.

a Improper Access Control vulnerability in of Open Build Service allows remote attackers to read files of an OBS package where the sourceaccess/access is disabled This issue affects: Open Build Service versions prior to 2.10.5.

Affected products

• Debian Debian Linux: version 9.0 only
• Opensuse Open Build Service: before 2.10.5 (fixed in 2.10.5)

Published 2020-05-19. Last modified 2026-06-17.