CVE-2013-7042 - SUSE Lifecycle Management Server (SLMS) before 1.3.7 uses world-readable permissions for the secret keys, which allows local users to gain privileges via unspecified vectors

Back Back to CVE browser

MEDIUM

SUSE Lifecycle Management Server (SLMS) before 1.3.7 uses world-readable permissions for the secret keys, which allows local users to gain privileges via unspecified vectors

Published Dec 10, 2013

4.6

MEDIUM

CVSS 2.0

EPSS 0.34%

Description

SUSE Lifecycle Management Server (SLMS) before 1.3.7 uses world-readable permissions for the secret keys, which allows local users to gain privileges via unspecified vectors.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-264

References (5)

http://osvdb.org/100652
vdb-entryx_refsource_OSVDB
https://bugzilla.novell.com/show_bug.cgi?id=852101
x_refsource_CONFIRM
https://euvd.enisa.europa.eu/vulnerability/EUVD-2013-6842
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/89897
vdb-entryx_refsource_XF
https://www.suse.com/support/update/announcement/2013/suse-su-20131813-1.html
vendor-advisoryx_refsource_SUSEVendor Advisory

Link	Providers	Tags
http://osvdb.org/100652		vdb-entryx_refsource_OSVDB
https://bugzilla.novell.com/show_bug.cgi?id=852101		x_refsource_CONFIRM
https://euvd.enisa.europa.eu/vulnerability/EUVD-2013-6842		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/89897		vdb-entryx_refsource_XF
https://www.suse.com/support/update/announcement/2013/suse-su-20131813-1.html		vendor-advisoryx_refsource_SUSEVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Dec 10, 2013

Updated Aug 6, 2024

Reserved Dec 10, 2013

Link CVE-2013-7042

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2013-7042

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Dec 10, 2013

Updated Aug 6, 2024

Link EUVD-2013-6842

GitHub

No data