Vulnerability in Trevor Mckay Cumin
CVE-2012-2681
Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, uses predictable random numbers to generate session keys, which makes it easier for remote attackers to guess the session key.
Vulnerability class: POODLE (CVE-2014-3566)
EPSS: 0.022 (80.7th percentile) — read the EPSS interpretation.
Affected products
- Trevor_mckay Cumin — versions 0.1.3160-1, 0.1.4369-1, 0.1.4410-2
- Redhat Enterprise_mrg — versions 2.0
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- secalert@redhat.com (Exploit, x_refsource_MISC)
- secalert@redhat.com (vdb-entry, x_refsource_BID)
- secalert@redhat.com (vdb-entry, x_refsource_XF)
- secalert@redhat.com (x_refsource_REDHAT, vendor-advisory, Vendor Advisory)
- secalert@redhat.com (x_refsource_REDHAT, vendor-advisory, Vendor Advisory)
- secalert@redhat.com (x_refsource_SECUNIA, third-party-advisory)
Frequently asked questions
- What is CVE-2012-2681?
- CVE-2012-2681 is a vulnerability in Trevor Mckay Cumin, classified under Cryptographic Issues. Published 2012-09-28.
- Is CVE-2012-2681 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.