CVEvulnerability
CVE-2012-3458
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2012-09-15
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-310
Description
Beaker before 1.6.4, when using PyCrypto to encrypt sessions, uses AES in ECB cipher mode, which might allow remote attackers to obtain portions of sensitive session data via unspecified vectors.
Affected configurations
• python beaker (<= 1.6.4)
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/50226 Vendor Advisory
- http://secunia.com/advisories/50520 Vendor Advisory
- http://www.debian.org/security/2012/dsa-2541 www.debian.org
- http://www.openwall.com/lists/oss-security/2012/08/13/10 www.openwall.com
- https://bugzilla.redhat.com/show_bug.cgi?id=809267 bugzilla.redhat.com
- https://github.com/bbangert/beaker/commit/91becae76101cf87ce8cbfabe3af2622fc328fe5 github.com
- http://secunia.com/advisories/50226 Vendor Advisory
- http://secunia.com/advisories/50520 Vendor Advisory
- http://www.debian.org/security/2012/dsa-2541 www.debian.org
- http://www.openwall.com/lists/oss-security/2012/08/13/10 www.openwall.com
- https://bugzilla.redhat.com/show_bug.cgi?id=809267 bugzilla.redhat.com
- https://github.com/bbangert/beaker/commit/91becae76101cf87ce8cbfabe3af2622fc328fe5 github.com