cumin: authentication bypass flaws
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| n/a | n/a | affected |
|
Configuration 1 [-]
|
| Package | CPE | Advisory | Released Date |
|---|---|---|---|
| MRG for RHEL-5 v. 2 | |||
| condor-0:7.6.5-0.22.el5 | cpe:/a:redhat:enterprise_mrg:2::el5 | RHSA-2012:1278 | 2012-09-19T00:00:00Z |
| condor-wallaby-0:4.1.3-1.el5 | cpe:/a:redhat:enterprise_mrg:2::el5 | RHSA-2012:1278 | 2012-09-19T00:00:00Z |
| condor-wallaby-base-db-0:1.23-1.el5 | cpe:/a:redhat:enterprise_mrg:2::el5 | RHSA-2012:1278 | 2012-09-19T00:00:00Z |
| cumin-0:0.1.5444-3.el5 | cpe:/a:redhat:enterprise_mrg:2::el5 | RHSA-2012:1278 | 2012-09-19T00:00:00Z |
| sesame-0:1.0-4.el5 | cpe:/a:redhat:enterprise_mrg:2::el5 | RHSA-2012:1278 | 2012-09-19T00:00:00Z |
| wallaby-0:0.12.5-10.el5 | cpe:/a:redhat:enterprise_mrg:2::el5 | RHSA-2012:1278 | 2012-09-19T00:00:00Z |
| Red Hat Enterprise MRG 2 | |||
| condor-0:7.6.5-0.22.el6 | cpe:/a:redhat:enterprise_mrg:2:server:el6 | RHSA-2012:1281 | 2012-09-19T00:00:00Z |
| condor-wallaby-0:4.1.3-1.el6 | cpe:/a:redhat:enterprise_mrg:2:server:el6 | RHSA-2012:1281 | 2012-09-19T00:00:00Z |
| condor-wallaby-base-db-0:1.23-1.el6 | cpe:/a:redhat:enterprise_mrg:2:server:el6 | RHSA-2012:1281 | 2012-09-19T00:00:00Z |
| cumin-0:0.1.5444-3.el6 | cpe:/a:redhat:enterprise_mrg:2:server:el6 | RHSA-2012:1281 | 2012-09-19T00:00:00Z |
| deltacloud-core-0:0.5.0-10.el6_2 | cpe:/a:redhat:enterprise_mrg:2:server:el6 | RHSA-2012:1281 | 2012-09-19T00:00:00Z |
| libdeltacloud-0:0.9-1.el6 | cpe:/a:redhat:enterprise_mrg:2:server:el6 | RHSA-2012:1281 | 2012-09-19T00:00:00Z |
| rubygem-daemons-0:1.1.4-2.el6 | cpe:/a:redhat:enterprise_mrg:2:server:el6 | RHSA-2012:1281 | 2012-09-19T00:00:00Z |
| rubygem-eventmachine-0:0.12.10-7.el6 | cpe:/a:redhat:enterprise_mrg:2:server:el6 | RHSA-2012:1281 | 2012-09-19T00:00:00Z |
| rubygem-fssm-0:0.2.7-1.el6 | cpe:/a:redhat:enterprise_mrg:2:server:el6 | RHSA-2012:1281 | 2012-09-19T00:00:00Z |
| rubygem-haml-0:3.1.2-2.el6 | cpe:/a:redhat:enterprise_mrg:2:server:el6 | RHSA-2012:1281 | 2012-09-19T00:00:00Z |
| rubygem-hpricot-0:0.8.4-2.el6 | cpe:/a:redhat:enterprise_mrg:2:server:el6 | RHSA-2012:1281 | 2012-09-19T00:00:00Z |
| rubygem-json-0:1.4.6-10.el6 | cpe:/a:redhat:enterprise_mrg:2:server:el6 | RHSA-2012:1281 | 2012-09-19T00:00:00Z |
| rubygem-maruku-0:0.6.0-4.el6 | cpe:/a:redhat:enterprise_mrg:2:server:el6 | RHSA-2012:1281 | 2012-09-19T00:00:00Z |
| rubygem-mime-types-0:1.16-4.el6_0 | cpe:/a:redhat:enterprise_mrg:2:server:el6 | RHSA-2012:1281 | 2012-09-19T00:00:00Z |
| rubygem-mocha-0:0.9.7-4.el6 | cpe:/a:redhat:enterprise_mrg:2:server:el6 | RHSA-2012:1281 | 2012-09-19T00:00:00Z |
| rubygem-net-ssh-0:2.0.23-6.el6_0 | cpe:/a:redhat:enterprise_mrg:2:server:el6 | RHSA-2012:1281 | 2012-09-19T00:00:00Z |
| rubygem-nokogiri-0:1.5.0-0.8.beta4.el6 | cpe:/a:redhat:enterprise_mrg:2:server:el6 | RHSA-2012:1281 | 2012-09-19T00:00:00Z |
| rubygem-rack-1:1.3.0-2.el6 | cpe:/a:redhat:enterprise_mrg:2:server:el6 | RHSA-2012:1281 | 2012-09-19T00:00:00Z |
| rubygem-rack-accept-0:0.4.3-6.el6_0 | cpe:/a:redhat:enterprise_mrg:2:server:el6 | RHSA-2012:1281 | 2012-09-19T00:00:00Z |
| rubygem-rack-test-0:0.6.1-1.el6 | cpe:/a:redhat:enterprise_mrg:2:server:el6 | RHSA-2012:1281 | 2012-09-19T00:00:00Z |
| rubygem-rake-0:0.8.7-2.1.el6 | cpe:/a:redhat:enterprise_mrg:2:server:el6 | RHSA-2012:1281 | 2012-09-19T00:00:00Z |
| rubygem-rest-client-0:1.6.1-2.el6_0 | cpe:/a:redhat:enterprise_mrg:2:server:el6 | RHSA-2012:1281 | 2012-09-19T00:00:00Z |
| rubygems-0:1.8.16-1.el6 | cpe:/a:redhat:enterprise_mrg:2:server:el6 | RHSA-2012:1281 | 2012-09-19T00:00:00Z |
| rubygem-sass-0:3.1.4-4.el6 | cpe:/a:redhat:enterprise_mrg:2:server:el6 | RHSA-2012:1281 | 2012-09-19T00:00:00Z |
| rubygem-sinatra-1:1.2.6-2.el6 | cpe:/a:redhat:enterprise_mrg:2:server:el6 | RHSA-2012:1281 | 2012-09-19T00:00:00Z |
| rubygem-syntax-0:1.0.0-4.el6 | cpe:/a:redhat:enterprise_mrg:2:server:el6 | RHSA-2012:1281 | 2012-09-19T00:00:00Z |
| rubygem-thin-0:1.2.11-3.el6 | cpe:/a:redhat:enterprise_mrg:2:server:el6 | RHSA-2012:1281 | 2012-09-19T00:00:00Z |
| rubygem-tilt-0:1.3.2-3.el6 | cpe:/a:redhat:enterprise_mrg:2:server:el6 | RHSA-2012:1281 | 2012-09-19T00:00:00Z |
| rubygem-yard-0:0.7.2-1.el6 | cpe:/a:redhat:enterprise_mrg:2:server:el6 | RHSA-2012:1281 | 2012-09-19T00:00:00Z |
| sesame-0:1.0-6.el6 | cpe:/a:redhat:enterprise_mrg:2:server:el6 | RHSA-2012:1281 | 2012-09-19T00:00:00Z |
| wallaby-0:0.12.5-10.el6 | cpe:/a:redhat:enterprise_mrg:2:server:el6 | RHSA-2012:1281 | 2012-09-19T00:00:00Z |
No data available yet.
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2012-2662 | Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, does not properly restrict access to resources, which allows remote attackers to obtain sensitive information via unspecified vectors related to (1) "web pages," (2) "export functionality," and (3) "image viewing." |
No CVSS v4.0
No CVSS v3.1
No CVSS v3.0
This CVE is not in the KEV list.
Exploit prediction score: 2.3% (2.339% probability within 30 days)
Key SSVC decision points have not yet been added.
No history.