WebYaST 1.3 uses weak permissions for config/initializers/secrettoken.rb, which allows local users to gain privileges by reading the Rails secret token from this file...
7.2CVSS7AI score0.00481EPSS
SaveExploits1References8
Cvelist•added 2013/12/23 11:0 p.m.•38 views
CVE-2013-3709
WebYaST 1.3 uses weak permissions for config/initializers/secrettoken.rb, which allows local users to gain privileges by reading the Rails secret token from this file...
