Novell SUSE Lifecycle Management Server (SLMS) 1.3

CPE Details

Novell SUSE Lifecycle Management Server (SLMS) 1.3
novell
suse_lifecycle_management_server
1.3
2013-12-12
14h16 +00:00
2013-12-12
14h24 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:novell:suse_lifecycle_management_server:1.3:*:*:*:*:*:*:*

Informations

Vendor

novell

Product

suse_lifecycle_management_server

Version

1.3

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2013-3709 2013-12-23 22h00 +00:00 WebYaST 1.3 uses weak permissions for config/initializers/secret_token.rb, which allows local users to gain privileges by reading the Rails secret token from this file.
7.2
CVE-2013-3710 2013-12-10 14h00 +00:00 SUSE Lifecycle Management Server (SLMS) before 1.3.7 does not generate a new secret key when the service starts, which allows remote attackers to defeat intended cryptographic protection mechanisms by leveraging knowledge of this key from a product installation elsewhere.
4.3
CVE-2013-7042 2013-12-10 14h00 +00:00 SUSE Lifecycle Management Server (SLMS) before 1.3.7 uses world-readable permissions for the secret keys, which allows local users to gain privileges via unspecified vectors.
4.6
The information presented on CVE Find originates from several carefully selected reference sources. CVE data is provided by MITRE Corporation and the National Vulnerability Database (NVD). The Known Exploited Vulnerabilities (KEV) catalog is sourced from the Cybersecurity and Infrastructure Security Agency (CISA), while EPSS scores come from FIRST.org. Additionally, data regarding software weaknesses (CWE) and common attack patterns (CAPEC) is maintained by MITRE Corporation, and information on hardware and software configurations (CPE) is provided by the NVD.