CVE-2012-2966 in Resin

Summary

Caucho Quercus, as distributed in Resin before 4.0.29, overwrites entries in the SERVER superglobal array on the basis of POST parameters, which has unspecified impact and remote attack vectors.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Reservation: 05/30/2012
• Disclosure: 08/12/2012
• Moderation: VulDB entry created
• Entries: VDB-61537 (1)
• CPE: ready
• CWE: Unknown
• CVSS: 7.3
• EPSS: 0.01519
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2012-2966
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2012-2966
• CVE Details: https://www.cvedetails.com/cve/CVE-2012-2966/