CVE-2012-2735
Fixed in a distro release EPSS 2%
Session fixation vulnerability in Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, allows remote attackers to hijack web sessions via a crafted session cookie.
Products: trevor_mckay cumin, redhat enterprise_mrg
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat enterprise mrg 2 | condor | 0:7.6.5-0.22.el5 |
| Red Hat enterprise mrg 2 | condor-aviary | 0:7.6.5-0.22.el5 |
| Red Hat enterprise mrg 2 | condor-classads | 0:7.6.5-0.22.el5 |
| Red Hat enterprise mrg 2 | condor-debuginfo | 0:7.6.5-0.22.el5 |
| Red Hat enterprise mrg 2 | condor-kbdd | 0:7.6.5-0.22.el5 |
| Red Hat enterprise mrg 2 | condor-qmf | 0:7.6.5-0.22.el5 |
| Red Hat enterprise mrg 2 | condor-vm-gahp | 0:7.6.5-0.22.el5 |
| Red Hat enterprise mrg 2 | condor-wallaby | 0:4.1.3-1.el5 |
| Red Hat enterprise mrg 2 | condor-wallaby-base-db | 0:1.23-1.el5 |
| Red Hat enterprise mrg 2 | condor-wallaby-client | 0:4.1.3-1.el5 |
| Red Hat enterprise mrg 2 | condor-wallaby-tools | 0:4.1.3-1.el5 |
| Red Hat enterprise mrg 2 | cumin | 0:0.1.5444-3.el5 |
| Red Hat enterprise mrg 2 | python-wallaby | 0:0.12.5-10.el5 |
| Red Hat enterprise mrg 2 | python-wallabyclient | 0:4.1.3-1.el5 |
| Red Hat enterprise mrg 2 | ruby-wallaby | 0:0.12.5-10.el5 |
| Red Hat enterprise mrg 2 | sesame | 0:1.0-4.el5 |
| Red Hat enterprise mrg 2 | sesame-debuginfo | 0:1.0-4.el5 |
| Red Hat enterprise mrg 2 | wallaby | 0:0.12.5-10.el5 |
| Red Hat enterprise mrg 2 | wallaby-utils | 0:0.12.5-10.el5 |
| Red Hat enterprise mrg 2 computenode el6 | condor | 0:7.6.5-0.22.el6 |
| Red Hat enterprise mrg 2 computenode el6 | condor-classads | 0:7.6.5-0.22.el6 |
| Red Hat enterprise mrg 2 computenode el6 | condor-debuginfo | 0:7.6.5-0.22.el6 |
| Red Hat enterprise mrg 2 computenode el6 | condor-kbdd | 0:7.6.5-0.22.el6 |
| Red Hat enterprise mrg 2 computenode el6 | condor-qmf | 0:7.6.5-0.22.el6 |
| Red Hat enterprise mrg 2 computenode el6 | condor-vm-gahp | 0:7.6.5-0.22.el6 |
| Red Hat enterprise mrg 2 computenode el6 | condor-wallaby | 0:4.1.3-1.el6 |
| Red Hat enterprise mrg 2 computenode el6 | condor-wallaby-base-db | 0:1.23-1.el6 |
| Red Hat enterprise mrg 2 computenode el6 | condor-wallaby-client | 0:4.1.3-1.el6 |
| Red Hat enterprise mrg 2 computenode el6 | condor-wallaby-tools | 0:4.1.3-1.el6 |
| Red Hat enterprise mrg 2 computenode el6 | python-wallabyclient | 0:4.1.3-1.el6 |
| Red Hat enterprise mrg 2 computenode el6 | ruby-wallaby | 0:0.12.5-10.el6 |
| Red Hat enterprise mrg 2 computenode el6 | rubygem-rake | 0:0.8.7-2.1.el6 |
| Red Hat enterprise mrg 2 computenode el6 | rubygems | 0:1.8.16-1.el6 |
| Red Hat enterprise mrg 2 computenode el6 | sesame | 0:1.0-6.el6 |
| Red Hat enterprise mrg 2 computenode el6 | sesame-debuginfo | 0:1.0-6.el6 |
| Red Hat enterprise mrg 2 computenode el6 | wallaby | 0:0.12.5-10.el6 |
| Red Hat enterprise mrg 2 computenode el6 | wallaby-utils | 0:0.12.5-10.el6 |
| Red Hat enterprise mrg 2 server el6 | condor | 0:7.6.5-0.22.el6 |
| Red Hat enterprise mrg 2 server el6 | condor-aviary | 0:7.6.5-0.22.el6 |
| Red Hat enterprise mrg 2 server el6 | condor-classads | 0:7.6.5-0.22.el6 |
| Red Hat enterprise mrg 2 server el6 | condor-cluster-resource-agent | 0:7.6.5-0.22.el6 |
| Red Hat enterprise mrg 2 server el6 | condor-debuginfo | 0:7.6.5-0.22.el6 |
| Red Hat enterprise mrg 2 server el6 | condor-deltacloud-gahp | 0:7.6.5-0.22.el6 |
| Red Hat enterprise mrg 2 server el6 | condor-kbdd | 0:7.6.5-0.22.el6 |
| Red Hat enterprise mrg 2 server el6 | condor-plumage | 0:7.6.5-0.22.el6 |
| Red Hat enterprise mrg 2 server el6 | condor-qmf | 0:7.6.5-0.22.el6 |
| Red Hat enterprise mrg 2 server el6 | condor-vm-gahp | 0:7.6.5-0.22.el6 |
| Red Hat enterprise mrg 2 server el6 | condor-wallaby | 0:4.1.3-1.el6 |
| Red Hat enterprise mrg 2 server el6 | condor-wallaby-base-db | 0:1.23-1.el6 |
| Red Hat enterprise mrg 2 server el6 | condor-wallaby-client | 0:4.1.3-1.el6 |
| Red Hat enterprise mrg 2 server el6 | condor-wallaby-tools | 0:4.1.3-1.el6 |
| Red Hat enterprise mrg 2 server el6 | cumin | 0:0.1.5444-3.el6 |
| Red Hat enterprise mrg 2 server el6 | deltacloud-core | 0:0.5.0-10.el6_2 |
| Red Hat enterprise mrg 2 server el6 | deltacloud-core-doc | 0:0.5.0-10.el6_2 |
| Red Hat enterprise mrg 2 server el6 | deltacloud-core-rhevm | 0:0.5.0-10.el6_2 |
| Red Hat enterprise mrg 2 server el6 | libdeltacloud | 0:0.9-1.el6 |
| Red Hat enterprise mrg 2 server el6 | libdeltacloud-debuginfo | 0:0.9-1.el6 |
| Red Hat enterprise mrg 2 server el6 | libdeltacloud-devel | 0:0.9-1.el6 |
| Red Hat enterprise mrg 2 server el6 | python-wallaby | 0:0.12.5-10.el6 |
| Red Hat enterprise mrg 2 server el6 | python-wallabyclient | 0:4.1.3-1.el6 |
| Red Hat enterprise mrg 2 server el6 | ruby-hpricot | 0:0.8.4-2.el6 |
| Red Hat enterprise mrg 2 server el6 | ruby-json | 0:1.4.6-10.el6 |
| Red Hat enterprise mrg 2 server el6 | ruby-nokogiri | 0:1.5.0-0.8.beta4.el6 |
| Red Hat enterprise mrg 2 server el6 | ruby-wallaby | 0:0.12.5-10.el6 |
| Red Hat enterprise mrg 2 server el6 | rubygem-daemons | 0:1.1.4-2.el6 |
| Red Hat enterprise mrg 2 server el6 | rubygem-eventmachine | 0:0.12.10-7.el6 |
| Red Hat enterprise mrg 2 server el6 | rubygem-eventmachine-debuginfo | 0:0.12.10-7.el6 |
| Red Hat enterprise mrg 2 server el6 | rubygem-fssm | 0:0.2.7-1.el6 |
| Red Hat enterprise mrg 2 server el6 | rubygem-haml | 0:3.1.2-2.el6 |
| Red Hat enterprise mrg 2 server el6 | rubygem-hpricot | 0:0.8.4-2.el6 |
| Red Hat enterprise mrg 2 server el6 | rubygem-hpricot-debuginfo | 0:0.8.4-2.el6 |
| Red Hat enterprise mrg 2 server el6 | rubygem-hpricot-doc | 0:0.8.4-2.el6 |
| Red Hat enterprise mrg 2 server el6 | rubygem-json | 0:1.4.6-10.el6 |
| Red Hat enterprise mrg 2 server el6 | rubygem-json-debuginfo | 0:1.4.6-10.el6 |
| Red Hat enterprise mrg 2 server el6 | rubygem-maruku | 0:0.6.0-4.el6 |
| Red Hat enterprise mrg 2 server el6 | rubygem-mime-types | 0:1.16-4.el6_0 |
| Red Hat enterprise mrg 2 server el6 | rubygem-mime-types-doc | 0:1.16-4.el6_0 |
| Red Hat enterprise mrg 2 server el6 | rubygem-mocha | 0:0.9.7-4.el6 |
| Red Hat enterprise mrg 2 server el6 | rubygem-net-ssh | 0:2.0.23-6.el6_0 |
| Red Hat enterprise mrg 2 server el6 | rubygem-net-ssh-doc | 0:2.0.23-6.el6_0 |
| Red Hat enterprise mrg 2 server el6 | rubygem-nokogiri | 0:1.5.0-0.8.beta4.el6 |
| Red Hat enterprise mrg 2 server el6 | rubygem-nokogiri-debuginfo | 0:1.5.0-0.8.beta4.el6 |
| Red Hat enterprise mrg 2 server el6 | rubygem-nokogiri-doc | 0:1.5.0-0.8.beta4.el6 |
| Red Hat enterprise mrg 2 server el6 | rubygem-rack | 1:1.3.0-2.el6 |
| Red Hat enterprise mrg 2 server el6 | rubygem-rack-accept | 0:0.4.3-6.el6_0 |
| Red Hat enterprise mrg 2 server el6 | rubygem-rack-accept-doc | 0:0.4.3-6.el6_0 |
| Red Hat enterprise mrg 2 server el6 | rubygem-rack-test | 0:0.6.1-1.el6 |
| Red Hat enterprise mrg 2 server el6 | rubygem-rake | 0:0.8.7-2.1.el6 |
| Red Hat enterprise mrg 2 server el6 | rubygem-rest-client | 0:1.6.1-2.el6_0 |
| Red Hat enterprise mrg 2 server el6 | rubygem-sass | 0:3.1.4-4.el6 |
| Red Hat enterprise mrg 2 server el6 | rubygem-sass-doc | 0:3.1.4-4.el6 |
| Red Hat enterprise mrg 2 server el6 | rubygem-sinatra | 1:1.2.6-2.el6 |
| Red Hat enterprise mrg 2 server el6 | rubygem-syntax | 0:1.0.0-4.el6 |
| Red Hat enterprise mrg 2 server el6 | rubygem-thin | 0:1.2.11-3.el6 |
| Red Hat enterprise mrg 2 server el6 | rubygem-thin-debuginfo | 0:1.2.11-3.el6 |
| Red Hat enterprise mrg 2 server el6 | rubygem-thin-doc | 0:1.2.11-3.el6 |
| Red Hat enterprise mrg 2 server el6 | rubygem-tilt | 0:1.3.2-3.el6 |
| Red Hat enterprise mrg 2 server el6 | rubygem-tilt-doc | 0:1.3.2-3.el6 |
| Red Hat enterprise mrg 2 server el6 | rubygem-yard | 0:0.7.2-1.el6 |
| Red Hat enterprise mrg 2 server el6 | rubygems | 0:1.8.16-1.el6 |
| Red Hat enterprise mrg 2 server el6 | sesame | 0:1.0-6.el6 |
| Red Hat enterprise mrg 2 server el6 | sesame-debuginfo | 0:1.0-6.el6 |
| Red Hat enterprise mrg 2 server el6 | wallaby | 0:0.12.5-10.el6 |
| Red Hat enterprise mrg 2 server el6 | wallaby-utils | 0:0.12.5-10.el6 |