Total vulnerabilities in the database
WebYaST in yast2-webclient in SUSE Linux Enterprise (SLE) 11 on the WebYaST appliance uses a fixed secret key that is embedded in the appliance's image, which allows remote attackers to spoof session cookies by leveraging knowledge of this key.
| Software | From | Fixed in |
|---|---|---|
| novell / suse_linux | 11 | 11.x |