CVE-2012-3458

EPSS 0.6%
Veröffentlicht 15.09.2012 17:55:07
Zuletzt bearbeitet 11.04.2025 00:51:21
Quelle secalert@redhat.com
Teams Watchlist Login
Unerledigt Login

Beaker before 1.6.4, when using PyCrypto to encrypt sessions, uses AES in ECB cipher mode, which might allow remote attackers to obtain portions of sensitive session data via unspecified vectors.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 9

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Python ≫ Beaker Version <= 1.6.4

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.6%	0.67

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:P/I:N/A:N

http://secunia.com/advisories/50226

Vendor Advisory

http://secunia.com/advisories/50520

Vendor Advisory

http://www.debian.org/security/2012/dsa-2541

http://www.openwall.com/lists/oss-security/2012/08/13/10

https://bugzilla.redhat.com/show_bug.cgi?id=809267

https://github.com/bbangert/beaker/commit/91becae76101cf87ce8cbfabe3af2622fc328fe5

https://nvd.nist.gov/vuln/detail/CVE-2012-3458

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2012-3458

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2012-3458

EUVD