SUSE Lifecycle Management Server (SLMS) before 1.3.7 uses world-readable permissions for the secret keys, which allows local users to gain privileges via unspecified vectors.
| Software | From | Fixed in |
|---|---|---|
| novell / suse_lifecycle_management_server | 1.2 | 1.2.x |
| novell / suse_lifecycle_management_server | - | 1.3.x |
| novell / suse_lifecycle_management_server | 1.1 | 1.1.x |
| novell / suse_lifecycle_management_server | 1.0 | 1.0.x |