CVE-2012-2735

Description

Session fixation vulnerability in Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, allows remote attackers to hijack web sessions via a crafted session cookie.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/78776

http://www.securityfocus.com/bid/55618

http://secunia.com/advisories/50660

http://rhn.redhat.com/errata/RHSA-2012-1281.html

http://rhn.redhat.com/errata/RHSA-2012-1278.html

http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=832151

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3