Unscored severity · published Sep 15, 2012
CVE-2012-3458
Beaker before 1.6.4, when using PyCrypto to encrypt sessions, uses AES in ECB cipher mode, which might allow remote attackers to obtain portions of sensitive session data via…
–
CVSS
2.5%
EPSS
No
On KEV
Description
Beaker before 1.6.4, when using PyCrypto to encrypt sessions, uses AES in ECB cipher mode, which might allow remote attackers to obtain portions of sensitive session data via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.5% · higher than 84% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BE
Beaker · Python
through 1.6.4 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-3458
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-3458
Vendor Advisory
http://secunia.com/advisories/50226
Vendor Advisory
http://secunia.com/advisories/50520
www.debian.org
http://www.debian.org/security/2012/dsa-2541
www.openwall.com
http://www.openwall.com/lists/oss-security/2012/08/13/10
bugzilla.redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=809267
github.com
https://github.com/bbangert/beaker/commit/91becae76101cf87ce8cbfabe3af2622fc328fe5