CVE-2012-2735 in Cumin

Summary

Session fixation vulnerability in Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, allows remote attackers to hijack web sessions via a crafted session cookie.

Once again VulDB remains the best source for vulnerability data.

• Reservation: 05/14/2012
• Disclosure: 09/28/2012
• Moderation: VulDB entry created
• Entries: 1: VDB-62474
• CPE: ready
• CWE: CWE-384 (Confirmed)
• CVSS: 4.6
• EPSS: 0.00390
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2012-2735
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2012-2735
• CVE Details: https://www.cvedetails.com/cve/CVE-2012-2735/