Vulnerability CVE-2012-2735
Published: 2012-09-28

Description:
Session fixation vulnerability in Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, allows remote attackers to hijack web sessions via a crafted session cookie.

Type:

CWE-Other

CVSS2 => (AV:N/AC:M/Au:S/C:P/I:P/A:N)

CVSS Base Score
Impact Subscore
Exploitability Subscore
4.9/10
4.9/10
6.8/10
Exploit range
Attack complexity
Authentication
Remote
Medium
Single time
Confidentiality impact
Integrity impact
Availability impact
Partial
Partial
None
Affected software
Trevor mckay -> Cumin 
Redhat -> Enterprise mrg 

 References:
http://xforce.iss.net/xforce/xfdb/78776
http://www.securityfocus.com/bid/55618
http://secunia.com/advisories/50660
http://rhn.redhat.com/errata/RHSA-2012-1281.html
http://rhn.redhat.com/errata/RHSA-2012-1278.html
http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=832151
Copyright 2024, cxsecurity.com

 

Back to Top