VulnerabilityModified
CVE-2012-3459
Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, allows remote authenticated users to modify Condor attributes and possibly gain privileges via crafted additional parameters in an HTTP POST request, which…
MEDIUM 4.9EPSS 1.57%
Does this matter?
Lower severity and a low EPSS score (1.57%). Track it; it rarely justifies an emergency change on its own.
Description
Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, allows remote authenticated users to modify Condor attributes and possibly gain privileges via crafted additional parameters in an HTTP POST request, which triggers a job attribute change request to Condor.
- CVSS 2.0
- 4.9 MEDIUMAV:N/AC:M/Au:S/C:P/I:P/A:N
- EPSS
- 1.57% probability · 74th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-264
- Affected
- trevor mckay/cumin · redhat/enterprise mrg
- Source
- secalert@redhat.com
References
- http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=846501
- http://rhn.redhat.com/errata/RHSA-2012-1278.htmlVendor Advisory
- http://rhn.redhat.com/errata/RHSA-2012-1281.htmlVendor Advisory
- http://secunia.com/advisories/50660
- http://secunia.com/advisories/50666Vendor Advisory
- http://www.securityfocus.com/bid/55632
- http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=846501
- http://rhn.redhat.com/errata/RHSA-2012-1278.htmlVendor Advisory
- http://rhn.redhat.com/errata/RHSA-2012-1281.htmlVendor Advisory
- http://secunia.com/advisories/50660
- http://secunia.com/advisories/50666Vendor Advisory
- http://www.securityfocus.com/bid/55632
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.