Vulnerability in Caucho Resin

CVE-2012-2967

Caucho Quercus, as distributed in Resin before 4.0.29, does not properly implement the == (equals sign equals sign) operator for comparisons, which has unspecified impact and context-dependent attack vectors.

EPSS: 0.016 (73.5th percentile) — read the EPSS interpretation.

Affected products

  • Caucho Resin — versions 2.0.0, 2.0.1, 2.0.2
  • N/a — versions n/a

References