CVE-2012-2684

cumin: SQL injection flaw

Published Sep 28, 2012 CVSS 2.0 · 7.5 High EPSS 2.1% KEV · Not listed
Description
Multiple SQL injection vulnerabilities in the get_sample_filters_by_signature function in Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, allow remote attackers to execute arbitrary SQL commands via the (1) agent or (2) object id.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2012-2666 Multiple SQL injection vulnerabilities in the get_sample_filters_by_signature function in Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, allow remote attackers to execute arbitrary SQL commands via the (1) agent or (2) object id.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 6, 2024, 7:42 PM
Reserved
May 14, 2012, 12:00 AM
Status
Modified
Published
Sep 28, 2012, 5:55 PM
Modified
Jun 16, 2026, 11:41 PM
Severity
Moderate
Public date
Sep 19, 2012, 12:00 AM