CVEvulnerability
CVE-2012-2681
5.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2012-09-28
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:N
- Weaknesses
- CWE-310
Description
Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, uses predictable random numbers to generate session keys, which makes it easier for remote attackers to guess the session key.
Affected configurations
• trevor mckay cumin (<= 0.1.5192-4)
• trevor mckay cumin 0.1.3160-1
• trevor mckay cumin 0.1.4369-1
• trevor mckay cumin 0.1.4410-2
• trevor mckay cumin 0.1.4494-1
• trevor mckay cumin 0.1.4794-1
• trevor mckay cumin 0.1.4916-1
• trevor mckay cumin 0.1.5098-2
• trevor mckay cumin 0.1.5192-1
• redhat enterprise mrg 2.0
Related
Weakness · not in database (1)
References
- http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=827558 Exploit
- http://rhn.redhat.com/errata/RHSA-2012-1278.html Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2012-1281.html Vendor Advisory
- http://secunia.com/advisories/50660 secunia.com
- http://www.securityfocus.com/bid/55618 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/78771 exchange.xforce.ibmcloud.com
- http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=827558 Exploit
- http://rhn.redhat.com/errata/RHSA-2012-1278.html Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2012-1281.html Vendor Advisory
- http://secunia.com/advisories/50660 secunia.com
- http://www.securityfocus.com/bid/55618 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/78771 exchange.xforce.ibmcloud.com