CVE-2012-2681: Medium severity Trevor Mckay Cumin vulnerability
Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, uses predictable random numbers to generate session keys, which makes it easier for remote attackers to guess the session key.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-2681?
CVE-2012-2681 is classified as a high-severity vulnerability due to its potential to allow remote attackers to guess session keys.
How do I fix CVE-2012-2681?
To fix CVE-2012-2681, upgrade to a version of Cumin that is 0.1.5444 or later.
What software is affected by CVE-2012-2681?
CVE-2012-2681 affects versions of Cumin prior to 0.1.5444, including multiple specific versions like 0.1.3160-1 and others.
What types of attacks can exploit CVE-2012-2681?
CVE-2012-2681 can be exploited for session key guessing attacks, allowing unauthorized access to sessions.
Is CVE-2012-2681 still a concern for current systems?
Yes, CVE-2012-2681 remains a concern for systems using vulnerable versions of Cumin, particularly in Red Hat Enterprise Messaging.