CVE-2012-2735: Medium severity Trevor Mckay Cumin vulnerability
Published Sep 28, 2012
·Updated
Session fixation vulnerability in Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, allows remote attackers to hijack web sessions via a crafted session cookie.
Affected Software
21 affected components
Trevor Mckay Cumin<=0.1.5192-4
Trevor Mckay Cumin=0.1.3160-1
Trevor Mckay Cumin=0.1.4369-1
Trevor Mckay Cumin=0.1.4410-2
Trevor Mckay Cumin=0.1.4494-1
Trevor Mckay Cumin=0.1.4794-1
Trevor Mckay Cumin=0.1.4916-1
Trevor Mckay Cumin=0.1.5033-1
Trevor Mckay Cumin=0.1.5037-1
Trevor Mckay Cumin=0.1.5054-1
Trevor Mckay Cumin=0.1.5068-1
Trevor Mckay Cumin=0.1.5092-1
Trevor Mckay Cumin=0.1.5098-2
Trevor Mckay Cumin=0.1.5105-1
Trevor Mckay Cumin=0.1.5137-1
Trevor Mckay Cumin=0.1.5137-2
Trevor Mckay Cumin=0.1.5137-3
Trevor Mckay Cumin=0.1.5137-4
Trevor Mckay Cumin=0.1.5137-5
Trevor Mckay Cumin=0.1.5192-1
redhat Enterprise MRG=2.0
Event History
Sep 28, 2012
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-2735?
CVE-2012-2735 is categorized as a medium severity vulnerability that allows session hijacking.
2
How do I fix CVE-2012-2735?
To mitigate CVE-2012-2735, upgrade to Cumin version 0.1.5444 or later.
3
What types of attacks are possible with CVE-2012-2735?
CVE-2012-2735 can lead to remote attackers hijacking user sessions through crafted session cookies.
4
Which applications are affected by CVE-2012-2735?
CVE-2012-2735 affects versions of Cumin prior to 0.1.5444, including certain Red Hat Enterprise Messaging and Grid applications.
5
Is there any workaround for CVE-2012-2735 until I can upgrade?
There are no known workarounds for CVE-2012-2735; upgrading to a fixed version is the recommended solution.