What is CVE-2012-2735?

CVE-2012-2735 is a vulnerability in Trevor Mckay Cumin. Published 2012-09-28.

Is CVE-2012-2735 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Trevor Mckay Cumin

CVE-2012-2735

Session fixation vulnerability in Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, allows remote attackers to hijack web sessions via a crafted session cookie.

Published 2012-09-28 · last modified 2026-06-16.

CVSS v2 metric

CVSS v2 base score 4.9 (Medium). Vector: AV:N/AC:M/Au:S/C:P/I:P/A:N. This CVE predates CVSS v3 and has no v3 score from NVD.

EPSS exploit prediction

EPSS: 0.016 (74.4th percentile), scored 2026-09-30.

Low probability of exploitation in the next 30 days, but still tracked. 74th percentile — 74.4% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.016 · newest: 0.016 · change: 0.000

Affected products

Trevor Mckay Cumin — versions 0.1.3160-1, 0.1.4369-1, 0.1.4410-2
Red Hat Enterprise Mrg — versions 2.0

Public proof-of-concept exploits

ARPSyndicate/cve-scores

References

www.securityfocus.com/bid/55618 (vdb-entry)
rhn.redhat.com/errata/RHSA-2012-1278.html (vendor-advisory, Vendor Advisory)
rhn.redhat.com/errata/RHSA-2012-1281.html (vendor-advisory, Vendor Advisory)
exchange.xforce.ibmcloud.com/vulnerabilities/78776 (vdb-entry)
bugzilla.redhat.com/bugzilla/show_bug.cgi
secunia.com/advisories/50660 (third-party-advisory)

Frequently asked questions

What is CVE-2012-2735?: CVE-2012-2735 is a vulnerability in Trevor Mckay Cumin. Published 2012-09-28.
Is CVE-2012-2735 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.