CVE-2011-2925: Medium severity redhat enterprise mrg vulnerability
A flaw was discovered in cumin where it would log broker authentication credentials to the cumin log file. A local user exploiting this flaw could connect to the broker outside of cumin's control and perform certain operations such as scheduling jobs, setting attributes on jobs, as well as holding, releasing or removing jobs. The user could also use this to, depending on the defined ACLs of the broker, manipulate message queues and other privileged operations.
Other sources
Cumin in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0 records broker authentication credentials in a log file, which allows local users to bypass authentication and perform unauthorized actions on jobs and message queues via a direct connection to the broker.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-2925?
CVE-2011-2925 has a medium severity level due to the exposure of sensitive broker authentication credentials.
How do I fix CVE-2011-2925?
To fix CVE-2011-2925, update to the latest patched version of Red Hat Enterprise MRG that addresses this vulnerability.
Who is affected by CVE-2011-2925?
CVE-2011-2925 affects users running Red Hat Enterprise MRG version 2.0.
What impact does CVE-2011-2925 have on security?
CVE-2011-2925 allows local users to exploit broker authentication credentials to perform unauthorized operations.
Is there a workaround for CVE-2011-2925?
As an immediate workaround for CVE-2011-2925, limit access to the cumin log files to prevent unauthorized reading of broker credentials.