CVE-2012-2734

EUVD-2012-2714
Multiple cross-site request forgery (CSRF) vulnerabilities in Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, allow remote attackers to hijack the authentication of arbitrary users for requests that execute commands via unspecified vectors.
CSRF
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.8 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 41%
Affected Products (NVD)
VendorProductVersion
trevor_mckaycumin
𝑥
≤ 0.1.5192-4
trevor_mckaycumin
0.1.3160-1
trevor_mckaycumin
0.1.4369-1
trevor_mckaycumin
0.1.4410-2
trevor_mckaycumin
0.1.4494-1
trevor_mckaycumin
0.1.4794-1
trevor_mckaycumin
0.1.4916-1
trevor_mckaycumin
0.1.5033-1
trevor_mckaycumin
0.1.5037-1
trevor_mckaycumin
0.1.5054-1
trevor_mckaycumin
0.1.5068-1
trevor_mckaycumin
0.1.5092-1
trevor_mckaycumin
0.1.5098-2
trevor_mckaycumin
0.1.5105-1
trevor_mckaycumin
0.1.5137-1
trevor_mckaycumin
0.1.5137-2
trevor_mckaycumin
0.1.5137-3
trevor_mckaycumin
0.1.5137-4
trevor_mckaycumin
0.1.5137-5
trevor_mckaycumin
0.1.5192-1
redhatenterprise_mrg
2.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=832124
http://rhn.redhat.com/errata/RHSA-2012-1278.html
http://rhn.redhat.com/errata/RHSA-2012-1281.html
http://secunia.com/advisories/50660
http://www.securityfocus.com/bid/55618
https://exchange.xforce.ibmcloud.com/vulnerabilities/78775
http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=832124
http://rhn.redhat.com/errata/RHSA-2012-1278.html
http://rhn.redhat.com/errata/RHSA-2012-1281.html
http://secunia.com/advisories/50660
http://www.securityfocus.com/bid/55618
https://exchange.xforce.ibmcloud.com/vulnerabilities/78775