By placing the preferences submenu in a K Menu, the SuSE YAST Control Center can be accessed with needing root authentication.
cbe7b887ed960f3dd38fae5615d2f3de63b570dc8ad5a6c8ea7580c13375ac81
A vulnerability exists in the implementation of
placing the SuSE YAST Control Center in the K Menu.
Normally, one would be required to authenticate as
root before being granted access to the YAST Control
Center. When placing the 'preferences' submenu in
the K Menu (in the 'submenu' section under the
'Menus' tab of the K menu panel preferences),
however, one can not only access, but make changes to
the options in the YAST control center without having
to authenticate as root.