CVE-2012-2735

MEDIUM 4.9CVE-2012-2735 · Published 28/09/2012 · updated 16/06/2026

In short

CVE-2012-2735 is a MEDIUM (CVSS 4.9) vulnerability affecting cumin (trevor mckay).
Chance of exploitation in the next 30 days (EPSS): 1.6%, higher than 75.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
cumin trevor_mckay	`= 0.1.3160-1= 0.1.4369-1= 0.1.4410-2= 0.1.4494-1= 0.1.4794-1= 0.1.4916-1= 0.1.5033-1= 0.1.5037-1= 0.1.5054-1= 0.1.5068-1= 0.1.5092-1= 0.1.5098-2= 0.1.5105-1= 0.1.5137-1= 0.1.5137-2= 0.1.5137-3= 0.1.5137-4= 0.1.5137-5= 0.1.5192-1≤ 0.1.5192-4`	No fix yet

Description

Session fixation vulnerability in Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, allows remote attackers to hijack web sessions via a crafted session cookie.

References

bugzilla.redhat.com/bugzilla/show_bug.cgi
rhn.redhat.com/errata/RHSA-2012-1278.html · Vendor Advisory
rhn.redhat.com/errata/RHSA-2012-1281.html · Vendor Advisory
secunia.com/advisories/50660
securityfocus.com/bid/55618
exchange.xforce.ibmcloud.com/vulnerabilities/78776

More vulnerabilities in cumin

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

cumin

trevor_mckay

= 0.1.3160-1= 0.1.4369-1= 0.1.4410-2= 0.1.4494-1= 0.1.4794-1= 0.1.4916-1= 0.1.5033-1= 0.1.5037-1= 0.1.5054-1= 0.1.5068-1= 0.1.5092-1= 0.1.5098-2= 0.1.5105-1= 0.1.5137-1= 0.1.5137-2= 0.1.5137-3= 0.1.5137-4= 0.1.5137-5= 0.1.5192-1≤ 0.1.5192-4

No fix yet

More vulnerabilities in cumin

See all →