Search/CVE-2013-3709
● CVE

CVE-2013-3709

Vendorsuse, novellProductstudio onsite, suse lifecycle management server, webyastDiscoveredDec 23, 2013UpdatedApr 29, 2026

WebYaST 1.3 uses weak permissions for config/initializers/secret_token.rb, which allows local users to gain privileges by reading the Rails secret token from this file.

View graph Watch Export
CVSS v3.1
—
EPSS
0.48%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
Connections
4 relationships
Timeline
disclosure → media coverage
Dec 23, 2013
Disclosure — published as a CVE record. · last revised by NVD Apr 29, 2026