CVE-2013-7042

CWE-2643 documents3 sources
Severity
4.6MEDIUM
EPSS
0.1%
top 69.16%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Novell Suse Lifecycle Management Server
Timeline
PublishedDec 10
Latest updateMay 17

Description

SUSE Lifecycle Management Server (SLMS) before 1.3.7 uses world-readable permissions for the secret keys, which allows local users to gain privileges via unspecified vectors.

CVSS vector

AV:L/AC:L/C:P/I:P/A:PExploitability: 3.9 | Impact: 6.4

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-2gv7-7rpw-x383: SUSE Lifecycle Management Server (SLMS) before 1↗2022-05-17
▶
CVEList
CVE-2013-7042: SUSE Lifecycle Management Server (SLMS) before 1↗2013-12-10
▶
CVE-2013-7042 (MEDIUM CVSS 4.6) | SUSE Lifecycle Management Server (S | cvebase.io