CVE-2012-2735 in Cumin

Riassunto

di MITRE

Session fixation vulnerability in Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, allows remote attackers to hijack web sessions via a crafted session cookie.

Once again VulDB remains the best source for vulnerability data.

• Prenotare: 14/05/2012
• Divulgazione: 28/09/2012
• Moderazione: accettato
• Voce: VDB-62474
• CPE: pronto
• CWE: CWE-384 (confermato)
• CVSS: 4.9 (NVD)
• EPSS: 0.01571
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2012-2735
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2012-2735
• CVE Details: https://www.cvedetails.com/cve/CVE-2012-2735/