CVE

Id
63656  
CVE No.
CVE-2013-3709  
Status
Candidate  
Description
WebYaST 1.3 uses weak permissions for config/initializers/secret_token.rb, which allows local users to gain privileges by reading the Rails secret token from this file.  
Phase
Assigned (20130530)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
630292 63656 CVE-2013-3709 MISC:https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/rails_secret_deserialization.rb  View
630293 63656 CVE-2013-3709 CONFIRM:https://bugzilla.novell.com/show_bug.cgi?id=851116  View
630294 63656 CVE-2013-3709 SUSE:SUSE-SU-2013:1894  View
630295 63656 CVE-2013-3709 URL:http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00006.html  View
630296 63656 CVE-2013-3709 SUSE:openSUSE-SU-2013:1952  View
630297 63656 CVE-2013-3709 URL:http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00012.html  View
630298 63656 CVE-2013-3709 SUSE:openSUSE-SU-2013:1954  View
630299 63656 CVE-2013-3709 URL:http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00013.html  View
630300 63656 CVE-2013-3709 SUSE:openSUSE-SU-2013:1961  View
630301 63656 CVE-2013-3709 URL:http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00014.html  View
630302 63656 CVE-2013-3709 SUSE:SUSE-SU-2014:0022  View

Related JVN