{"id":"CVE-2013-3709","aliases":["EUVD-2013-3642","GHSA-vr5h-9245-q2mh","SUSE-RU-2015:0793-1"],"status":"published","title":"WebYaST 1.3 uses weak permissions for config/initializers/secret_token.rb, which allows local...","description":"WebYaST 1.3 uses weak permissions for config/initializers/secret_token.rb, which allows local users to gain privileges by reading the Rails secret token from this file.","severity":{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00481,"percentile":0.41748,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-264"],"published":"2013-12-02T16:20:49Z","modified":"2026-06-16T23:55:39Z","products":[{"vendor":"novell","product":"suse_lifecycle_management_server"},{"vendor":"suse","product":"studio_onsite"},{"vendor":"suse","product":"webyast"}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00014.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-01/msg00001.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00012.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00013.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/rails_secret_deserialization.rb","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00006.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"https://bugzilla.novell.com/show_bug.cgi?id=851116","tags":["x_refsource_CONFIRM","x_transferred","Exploit"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-3709"},{"url":"https://github.com/advisories/GHSA-vr5h-9245-q2mh"},{"url":"https://www.suse.com/support/update/announcement//suse-ru-20150793-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/851116","tags":["report"]},{"url":"https://bugzilla.suse.com/926890","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3709","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2013-3709","description":"WebYaST 1.3 uses weak permissions for config/initializers/secret_token.rb, which allows local users to gain privileges by reading the Rails secret token from this file.","status":"published","published":"2013-12-23T23:00:00Z","modified":"2024-08-06T16:14:56.756Z","updated_at":"2026-11-02T14:34:56.530545Z"}],"euvd":[{"id":"EUVD-2013-3642","description":"WebYaST 1.3 uses weak permissions for config/initializers/secret_token.rb, which allows local users to gain privileges by reading the Rails secret token from this file.","status":"published","published":"2013-12-23T23:00:00Z","modified":"2024-08-06T16:14:56Z","updated_at":"2026-11-03T01:56:34.623989Z"}],"ghsa":[{"id":"GHSA-vr5h-9245-q2mh","title":"WebYaST 1.3 uses weak permissions for config/initializers/secret_token.rb, which allows local...","description":"WebYaST 1.3 uses weak permissions for config/initializers/secret_token.rb, which allows local users to gain privileges by reading the Rails secret token from this file.","status":"published","published":"2022-05-17T04:54:41Z","modified":"2023-01-28T05:02:39Z","updated_at":"2026-11-02T14:43:49.260703Z"}],"nvd":[{"id":"CVE-2013-3709","description":"WebYaST 1.3 uses weak permissions for config/initializers/secret_token.rb, which allows local users to gain privileges by reading the Rails secret token from this file.","status":"published","published":"2013-12-23T23:55:04.093Z","modified":"2026-06-16T23:55:39.873Z","cvss":[{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-264"],"updated_at":"2026-11-02T14:02:44.596064Z"}],"osv":[{"id":"SUSE-RU-2015:0793-1","title":"Security update for webyast","description":"\nThe following security issue has been fixed:\n\n    * CVE-2013-3709: webyast: local privilege escalation via secret rails\n      tokens execution.\n      This vulnerability was reported by joernchen of Phenoelit.\n\nSecurity Issue reference:\n\n    * CVE-2013-3709\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3709\u003e\n\n","status":"published","published":"2013-12-02T16:20:49Z","modified":"2026-02-04T03:07:37.551548Z","updated_at":"2026-11-02T15:53:41.276824Z"}]}}