CVE-2012-2735

Published: Sep 28, 2012Modified: Apr 29, 2026

4.9

Vector

AV:N/AC:M/Au:S/C:P/I:P/A:N

Exploitability: 6.8 / Impact: 4.9

Source: NVD

Description

Session fixation vulnerability in Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, allows remote attackers to hijack web sessions via a crafted session cookie.

Affected (21)

Products: Redhat: Enterprise Mrg · Trevor Mckay: Cumin

1 product

1 product

Configuration A

21 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Mrg	Version 2.0
Trevor Mckay Cumin	Up to 0.1.5192-4
Trevor Mckay Cumin	Version 0.1.3160-1
Trevor Mckay Cumin	Version 0.1.4369-1
Trevor Mckay Cumin	Version 0.1.4410-2
Trevor Mckay Cumin	Version 0.1.4494-1
Trevor Mckay Cumin	Version 0.1.4794-1
Trevor Mckay Cumin	Version 0.1.4916-1
Trevor Mckay Cumin	Version 0.1.5033-1
Trevor Mckay Cumin	Version 0.1.5037-1
Trevor Mckay Cumin	Version 0.1.5054-1
Trevor Mckay Cumin	Version 0.1.5068-1
Trevor Mckay Cumin	Version 0.1.5092-1
Trevor Mckay Cumin	Version 0.1.5098-2
Trevor Mckay Cumin	Version 0.1.5105-1
Trevor Mckay Cumin	Version 0.1.5137-1
Trevor Mckay Cumin	Version 0.1.5137-2
Trevor Mckay Cumin	Version 0.1.5137-3
Trevor Mckay Cumin	Version 0.1.5137-4
Trevor Mckay Cumin	Version 0.1.5137-5
Trevor Mckay Cumin	Version 0.1.5192-1