VIR Vulnerability Intelligence Relay

CVE-2013-3712

critical
Published 2014-02-26 · Modified 2026-04-29
CVSS v3
—
CVSS v2
10.0
VIR risk
10.0

Description

SUSE Studio Onsite 1.3.x before 1.3.6 and SUSE Studio Extension for System z 1.3 uses "static" secret tokens, which has unspecified impact and vectors.

Predictions

Exploit likelihood
20%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: cve@mitre.org — https://www.suse.com/support/update/announcement/2014/suse-su-20140254-1.html

vendor Authored 2026-05-27

Vendor advisory: cve@mitre.org — http://secunia.com/advisories/57050

Application impact
VendorProductVersionsFixed
susestudio_extension_for_system_z1.3
susestudio_onsite1.3
susestudio_onsite1.3.1
susestudio_onsite1.3.2
susestudio_onsite1.3.3
susestudio_onsite1.3.4
susestudio_onsite1.3.5

References

CWEs

CWE-310

Verify integrity in audit chain (admin only). AS-IS.