Suse Webyast vulnerabilities

4 CVEs affecting Suse Webyast, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2013-3709, published 2013-12-23.

More from Suse.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2013-4547, published 2013-11-23. High severity, CVSS 7.5. EPSS: 67.7% chance of exploitation in the next 30 days. nginx 0.8.41 through 1.4.3 and 1.5.x before 1.5.7 allows remote attackers to bypass intended restrictions via an unescaped space character in a URI.
• CVE-2011-4315, published 2011-12-08. Medium severity, CVSS 6.8. EPSS: 6% chance of exploitation in the next 30 days. Heap-based buffer overflow in compression-pointer processing in core/ngx_resolver.c in nginx before 1.0.10 allows remote resolvers to cause a denial of service (daemon crash) or possibly have…
• CVE-2012-0435, published 2013-01-26. Medium severity, CVSS 5.8. EPSS: 2.1% chance of exploitation in the next 30 days. SUSE WebYaST before 1.2 0.2.63-0.6.1 allows remote attackers to modify the hosts list, and subsequently conduct man-in-the-middle attacks, via a crafted /host request on TCP port 4984.
• CVE-2013-3709, published 2013-12-23. High severity, CVSS 7.2. EPSS: 0.5% chance of exploitation in the next 30 days. WebYaST 1.3 uses weak permissions for config/initializers/secret_token.rb, which allows local users to gain privileges by reading the Rails secret token from this file.