CVE-2013-4405
Fixed in a distro release EPSS <1%
Multiple cross-site request forgery (CSRF) vulnerabilities in the web interface for cumin in Red Hat Enterprise MRG Grid 2.4 allow remote attackers to hijack the authentication of cumin users for unspecified requests.
Products: redhat enterprise_mrg
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat enterprise mrg 2 | cumin | 0:0.1.5787-4.el5 |
| Red Hat enterprise mrg 2 computenode el6 | rubygems | 0:1.8.23.2-1.el6 |
| Red Hat enterprise mrg 2 server el6 | cumin | 0:0.1.5787-4.el6 |
| Red Hat enterprise mrg 2 server el6 | rubygems | 0:1.8.23.2-1.el6 |