Critical severity · published Nov 21, 2019
CVE-2012-3460
cumin: At installation postgresql database user created without password
9.8
CVSS
1.3%
EPSS
No
On KEV
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 70% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EM
Enterprise Mrg · Redhat
2.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-3460
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-3460
Third Party Advisory
https://access.redhat.com/security/cve/cve-2012-3460
Issue Tracking
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-3460
More from Enterprise Mrg
8.0
CVE-2018-16884
A flaw was found in the Linux kernel's NFS41+ subsystem
7.8
CVE-2020-27786
A flaw was found in the Linux kernel’s implementation of MIDI, where an attacker with a local account and the permissions to issue ioctl commands to midi devices could trigger a…
7.8
CVE-2020-10757
A flaw was found in the Linux Kernel in versions after 4.5-rc1 in the way mremap handled DAX Huge Pages
7.8
CVE-2017-7482
In the Linux kernel before version 4.12, Kerberos 5 tickets decoded when using the RXRPC keys incorrectly assumes the size of a field
7.8
CVE-2012-1097
The regset (aka register set) feature in the Linux kernel before 3.2.10 does not properly handle the absence of .get and .set methods, which allows local users to cause a denial…