WebYaST Vulnerability in openSUSE Allows Local Privilege Escalation
CVE-2013-3709
Currently unrated
What is CVE-2013-3709?
The WebYaST 1.3 application in openSUSE has been identified to use inadequate permissions for the config/initializers/secret_token.rb file. This flaw creates a significant security risk, as it enables local users to read the Rails secret token stored within that file. Such access can lead to further privilege escalation within the system.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.