CVE-2013-3709

WebYaST 1.3 uses weak permissions for config/initializers/secret_token.rb, which allows local users to gain privileges by reading the Rails secret token from…

published December 23, 2013

CVSS
—
EPSS
0%
Percentile
40.5
In the wild
Unconfirmed
What it is

WebYaST 1.3 uses weak permissions for config/initializers/secret_token.rb, which allows local users to gain privileges by reading the Rails secret token from this file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00481 · 40.5th percentile
Published
2013-12-23T23:00Z
EPSS history
Timeline
  • 23 DEC 23:00Z
    WebYaST 1.3 uses weak permissions for config/initializers/secret_token.rb, which allows local users to gain privileges by reading the Rails secret token from…
    cvelistv5