« Volver al listado

CVE-2013-3712

Estado: ModificadaAlta (10)—

SUSE Studio Onsite 1.3.x before 1.3.6 and SUSE Studio Extension for System z 1.3 uses "static" secret tokens, which has unspecified impact and vectors.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Suse — Studio Extension FOR System ZSuse — Studio Onsite

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2013-3712",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 10,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2014-02-26T15:55:08.923",
  "references": [
    {
      "url": "http://secunia.com/advisories/57050",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://www.suse.com/support/update/announcement/2014/suse-su-20140254-1.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/57050",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.suse.com/support/update/announcement/2014/suse-su-20140254-1.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-310"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "SUSE Studio Onsite 1.3.x before 1.3.6 and SUSE Studio Extension for System z 1.3 uses \"static\" secret tokens, which has unspecified impact and vectors."
    },
    {
      "lang": "es",
      "value": "SUSE Studio Onsite 1.3.x anterior a 1.3.6 y SUSE Studio Extension para System z 1.3 utiliza tokens secretos \"static\", lo que tiene impacto y vectores no especificados."
    }
  ],
  "lastModified": "2026-06-16T23:55:40.140",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:suse:studio_extension_for_system_z:1.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1D227128-0281-40F4-8F7E-1DA35232670E"
            },
            {
              "criteria": "cpe:2.3:a:suse:studio_onsite:1.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "74BCA435-7594-49E8-9BAE-9E02E129B6C0"
            },
            {
              "criteria": "cpe:2.3:a:suse:studio_onsite:1.3.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "71C654B7-5EA2-4DFD-A25A-AB498B3D63F7"
            },
            {
              "criteria": "cpe:2.3:a:suse:studio_onsite:1.3.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9561EE00-A6CE-4CE2-89B9-73A6EC4A1542"
            },
            {
              "criteria": "cpe:2.3:a:suse:studio_onsite:1.3.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A1C358C9-8E8C-4CED-9BE8-E5494C97D060"
            },
            {
              "criteria": "cpe:2.3:a:suse:studio_onsite:1.3.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D0B85E16-599C-4AD4-8C96-DC1031462521"
            },
            {
              "criteria": "cpe:2.3:a:suse:studio_onsite:1.3.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9D67EB5D-3F01-4730-96EB-A2E544229A8F"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}