Unscored severity · published Sep 20, 2011
CVE-2011-2925
Cumin in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0 records broker authentication credentials in a log file, which allows local users to bypass authentication and…
–
CVSS
0.4%
EPSS
No
On KEV
Description
Cumin in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0 records broker authentication credentials in a log file, which allows local users to bypass authentication and perform unauthorized actions on jobs and message queues via a direct connection to the broker.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 33% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EM
Enterprise Mrg · Redhat
2.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-2925
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-2925
osvdb.org
http://osvdb.org/75217
Vendor Advisory
http://secunia.com/advisories/45887
Vendor Advisory
http://secunia.com/advisories/45928
Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2011-1249.html
Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2011-1250.html
www.securityfocus.com
http://www.securityfocus.com/bid/49500
More from Enterprise Mrg
9.8
CVE-2012-3460
cumin: At installation postgresql database user created without password
8.0
CVE-2018-16884
A flaw was found in the Linux kernel's NFS41+ subsystem
7.8
CVE-2020-27786
A flaw was found in the Linux kernel’s implementation of MIDI, where an attacker with a local account and the permissions to issue ioctl commands to midi devices could trigger a…
7.8
CVE-2020-10757
A flaw was found in the Linux Kernel in versions after 4.5-rc1 in the way mremap handled DAX Huge Pages
7.8
CVE-2017-7482
In the Linux kernel before version 4.12, Kerberos 5 tickets decoded when using the RXRPC keys incorrectly assumes the size of a field