CVE-2013-3709

Published: Dec 23, 2013Modified: Apr 29, 2026

7.2

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

WebYaST 1.3 uses weak permissions for config/initializers/secret_token.rb, which allows local users to gain privileges by reading the Rails secret token from this file.

Affected (3)

Products: Novell: Suse Lifecycle Management Server · Suse: Studio Onsite, Webyast

Novell

1 product

Suse Lifecycle Management Server

Suse

2 products

Studio Onsite

Webyast

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Novell Suse Lifecycle Management Server	Version 1.3
Suse Studio Onsite	Version 1.3
Suse Webyast	Version 1.3

Related CWEs

CWE-264

References (14)

http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00006.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00012.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00013.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00014.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2014-01/msg00001.html

Source: cve@mitre.org

https://bugzilla.novell.com/show_bug.cgi?id=851116

Source: cve@mitre.org

Exploit

https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/rails_secret_deserialization.rb

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00006.html