CVE-2013-3710

Published: Dec 10, 2013Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

SUSE Lifecycle Management Server (SLMS) before 1.3.7 does not generate a new secret key when the service starts, which allows remote attackers to defeat intended cryptographic protection mechanisms by leveraging knowledge of this key from a product installation elsewhere.

Affected (4)

Products: Novell: Suse Lifecycle Management Server

Novell

1 product

Suse Lifecycle Management Server

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Novell Suse Lifecycle Management Server	Up to 1.3
Novell Suse Lifecycle Management Server	Version 1.0
Novell Suse Lifecycle Management Server	Version 1.1
Novell Suse Lifecycle Management Server	Version 1.2