GCVE-110-CERTCC-2012-806908

Advisory PublishedCVSS 6.4/10

Vulnetix · Advisory published January 23, 2013

The WebYaST hosts list is remotely accessible by unauthenticated attackers. An attacker may be able to add a malicious host to the list and perform a man-in-the-middle attack against WebYaST.

Download JSON Open in Console

Risk Scores

CVSS 2.0

6.4/10

Medium · AV:N/AC:L/Au:N/C:P/I:P/A:N

certcc-cam

impact0population0exploitation0widely_known0score_current0ease_of_exploitation0

certcc-vrda

d1_impact3d1_population2d1_direct_report1

certcc-cvss-temporal-env

temporal_score5remediation_levelOFreport_confidenceCenvironmental_score4.9target_distributionMenvironmental_vectorCDP:LM/TD:M/CR:M/IR:M/AR:L

Aliases

CVE-2012-0435

Transitive aliases

GHSA-p4g6-r5h7-2fc4 GSD-2012-0435

References

SUSE WebYaST remotely accessible hosts list vulnerability

url

SUSE WebYaST remotely accessible hosts list vulnerability

url

SUSE WebYaST remotely accessible hosts list vulnerability

advisory

Browse GCVE Records

72,409 records in the GCVE database · Updated July 14, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON