CVEvulnerability

CVE-2012-2735

4.9 MEDIUM Published 2012-09-28 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2012-09-28
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.9 MEDIUM — AV:N/AC:M/Au:S/C:P/I:P/A:N

Description

Session fixation vulnerability in Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, allows remote attackers to hijack web sessions via a crafted session cookie.

Affected configurations

• trevor mckay cumin (<= 0.1.5192-4) • trevor mckay cumin 0.1.3160-1 • trevor mckay cumin 0.1.4369-1 • trevor mckay cumin 0.1.4410-2 • trevor mckay cumin 0.1.4494-1 • trevor mckay cumin 0.1.4794-1 • trevor mckay cumin 0.1.4916-1 • trevor mckay cumin 0.1.5033-1 • trevor mckay cumin 0.1.5037-1 • trevor mckay cumin 0.1.5054-1 • trevor mckay cumin 0.1.5068-1 • trevor mckay cumin 0.1.5092-1 • trevor mckay cumin 0.1.5098-2 • trevor mckay cumin 0.1.5105-1 • trevor mckay cumin 0.1.5137-1 • trevor mckay cumin 0.1.5137-2 • trevor mckay cumin 0.1.5137-3 • trevor mckay cumin 0.1.5137-4 • trevor mckay cumin 0.1.5137-5 • trevor mckay cumin 0.1.5192-1 • redhat enterprise mrg 2.0

References