CVE-2010-1507

CVE-2010-1507

EPSS 2.2%

WebYaST in yast2-webclient in SUSE Linux Enterprise (SLE) 11 on the WebYaST appliance uses a fixed secret key that is embedded in the appliance's image, which allows remote attackers to spoof session cookies by leveraging knowledge of this key.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html https://bugzilla.novell.com/show_bug.cgi?id=591345 https://bugzilla.novell.com/show_bug.cgi?id=598834 http://support.novell.com/security/cve/CVE-2010-1507.html http://www.securityfocus.com/bid/42128