CVE-2012-3458

Published: Sep 15, 2012Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Beaker before 1.6.4, when using PyCrypto to encrypt sessions, uses AES in ECB cipher mode, which might allow remote attackers to obtain portions of sensitive session data via unspecified vectors.

Affected (1)

Products: Python: Beaker

Python

1 product

Beaker

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Python Beaker	Up to 1.6.4

Related CWEs

CWE-310

References (12)

http://secunia.com/advisories/50226

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/50520

Source: secalert@redhat.com

Vendor Advisory

http://www.debian.org/security/2012/dsa-2541

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2012/08/13/10

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=809267

Source: secalert@redhat.com

https://github.com/bbangert/beaker/commit/91becae76101cf87ce8cbfabe3af2622fc328fe5

Source: secalert@redhat.com

http://secunia.com/advisories/50226