| Package | Affected versions | Patched versions |
|---|---|---|
| suse lifecycle management server | = 1.3 | |
| studio onsite | = 1.3 | |
| webyast | = 1.3 |
WebYaST 1.3 uses weak permissions for config/initializers/secret_token.rb, which allows local users to gain privileges by reading the Rails secret token from this file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free