CVE-2012-2680: Medium severity Trevor Mckay Cumin vulnerability
Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, does not properly restrict access to resources, which allows remote attackers to obtain sensitive information via unspecified vectors related to (1) "web pages," (2) "export functionality," and (3) "image viewing."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-2680?
CVE-2012-2680 has a medium severity rating due to improper access restrictions allowing sensitive information disclosure.
How do I fix CVE-2012-2680?
To fix CVE-2012-2680, update Cumin to version 0.1.5444 or later, as it addresses the access control issues.
What software is affected by CVE-2012-2680?
CVE-2012-2680 affects Cumin versions prior to 0.1.5444 and is used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0.
What types of attacks are possible with CVE-2012-2680?
CVE-2012-2680 allows remote attackers to potentially access sensitive information through unspecified vectors involving web pages and export functionality.
Is there any workaround for CVE-2012-2680?
There are no specific workarounds documented for CVE-2012-2680; upgrading to the patched version is recommended.