WebYaST Vulnerability in openSUSE Allows Local Privilege Escalation

CVE-2013-3709

Summary

The WebYaST 1.3 application in openSUSE has been identified to use inadequate permissions for the config/initializers/secret_token.rb file. This flaw creates a significant security risk, as it enables local users to read the Rails secret token stored within that file. Such access can lead to further privilege escalation within the system.

References