CVE-2010-1507

CWE-2553 documents3 sources
Severity
5.0MEDIUM
EPSS
0.1%
top 65.32%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Novell Suse Linux
Timeline
PublishedSep 3
Latest updateMay 17

Description

WebYaST in yast2-webclient in SUSE Linux Enterprise (SLE) 11 on the WebYaST appliance uses a fixed secret key that is embedded in the appliance's image, which allows remote attackers to spoof session cookies by leveraging knowledge of this key.

CVSS vector

AV:N/AC:L/C:P/I:N/A:NExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-qq64-jrrc-67ww: WebYaST in yast2-webclient in SUSE Linux Enterprise (SLE) 11 on the WebYaST appliance uses a fixed secret key that is embedded in the appliance's imag↗2022-05-17
▶
CVEList
CVE-2010-1507: WebYaST in yast2-webclient in SUSE Linux Enterprise (SLE) 11 on the WebYaST appliance uses a fixed secret key that is embedded in the appliance's imag↗2010-09-03
▶
CVE-2010-1507 (MEDIUM CVSS 5) | WebYaST in yast2-webclient in SUSE | cvebase.io