Unscored severity · published Sep 28, 2012
CVE-2012-2734
Multiple cross-site request forgery (CSRF) vulnerabilities in Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, allow remote attackers…
–
CVSS
0.9%
EPSS
No
On KEV
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, allow remote attackers to hijack the authentication of arbitrary users for requests that execute commands via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 60% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CU
Cumin · Trevor Mckay
through 0.1.5192-4; 0.1.3160-1; 0.1.4369-1; 0.1.4410-2; 0.1.4494-1; 0.1.4794-1; +14 more · source: NVD
EM
Enterprise Mrg · Redhat
2.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-2734
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-2734
Exploit
http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=832124
Vendor Advisory
http://rhn.redhat.com/errata/RHSA-2012-1278.html
Vendor Advisory
http://rhn.redhat.com/errata/RHSA-2012-1281.html
secunia.com
http://secunia.com/advisories/50660
www.securityfocus.com
http://www.securityfocus.com/bid/55618
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/78775
More from Enterprise Mrg
9.8
CVE-2012-3460
cumin: At installation postgresql database user created without password
8.0
CVE-2018-16884
A flaw was found in the Linux kernel's NFS41+ subsystem
7.8
CVE-2020-27786
A flaw was found in the Linux kernel’s implementation of MIDI, where an attacker with a local account and the permissions to issue ioctl commands to midi devices could trigger a…
7.8
CVE-2020-10757
A flaw was found in the Linux Kernel in versions after 4.5-rc1 in the way mremap handled DAX Huge Pages
7.8
CVE-2017-7482
In the Linux kernel before version 4.12, Kerberos 5 tickets decoded when using the RXRPC keys incorrectly assumes the size of a field