CVE-2012-2734

Published: Sep 28, 2012Modified: Apr 29, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, allow remote attackers to hijack the authentication of arbitrary users for requests that execute commands via unspecified vectors.

Affected (21)

Products: Redhat: Enterprise Mrg · Trevor Mckay: Cumin

1 product

1 product

Configuration A

21 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Mrg	Version 2.0
Trevor Mckay Cumin	Up to 0.1.5192-4
Trevor Mckay Cumin	Version 0.1.3160-1
Trevor Mckay Cumin	Version 0.1.4369-1
Trevor Mckay Cumin	Version 0.1.4410-2
Trevor Mckay Cumin	Version 0.1.4494-1
Trevor Mckay Cumin	Version 0.1.4794-1
Trevor Mckay Cumin	Version 0.1.4916-1
Trevor Mckay Cumin	Version 0.1.5033-1
Trevor Mckay Cumin	Version 0.1.5037-1
Trevor Mckay Cumin	Version 0.1.5054-1
Trevor Mckay Cumin	Version 0.1.5068-1
Trevor Mckay Cumin	Version 0.1.5092-1
Trevor Mckay Cumin	Version 0.1.5098-2
Trevor Mckay Cumin	Version 0.1.5105-1
Trevor Mckay Cumin	Version 0.1.5137-1
Trevor Mckay Cumin	Version 0.1.5137-2
Trevor Mckay Cumin	Version 0.1.5137-3
Trevor Mckay Cumin	Version 0.1.5137-4
Trevor Mckay Cumin	Version 0.1.5137-5
Trevor Mckay Cumin	Version 0.1.5192-1