CVE-2010-1507

no score yetEPSS 2.1%

novell suse linux: no CVSS score yet. EPSS 2.1% chance of exploitation in the next 30 days.

WebYaST in yast2-webclient in SUSE Linux Enterprise (SLE) 11 on the WebYaST appliance uses a fixed secret key that is embedded in the appliance's image, which allows remote attackers to spoof session cookies by leveraging knowledge of this key.

EPSS: 2.1% chance of exploitation in the next 30 days; higher than 81% of CVEs (scores of 2026-10-31)
CWE: CWE-255
Published: 2010-09-03
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

novell:suse_linux

References

http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html
http://support.novell.com/security/cve/CVE-2010-1507.html
http://www.securityfocus.com/bid/42128
https://bugzilla.novell.com/show_bug.cgi?id=591345
https://bugzilla.novell.com/show_bug.cgi?id=598834

Check your stack JSON