CVE-2011-2925
Cumin in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0 records broker authentication...
4.6 MediumFix available
Cumin in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0 records broker authentication credentials in a log file, which allows local users to bypass authentication and perform unauthorized actions on jobs and message queues via a direct connection to the broker.
Exploit likelihood
0.39%Down 0.9 points since Feb 4, 2022
What each source reports
NVD Score used
Cumin in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0 records broker authentication credentials in a log file, which allows local users to bypass authentication and perform unauthorized actions on jobs and message queues via a direct connection to the broker.
- Record
CVE-2011-2925- CVSS 2.0
- 4.6 Medium
AV:L/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-287
- Updated
- 2026-11-02
CVE List No score
Cumin in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0 records broker authentication credentials in a log file, which allows local users to bypass authentication and perform unauthorized actions on jobs and message queues via a direct connection to the broker.
- Record
CVE-2011-2925- Updated
- 2026-11-02
EUVDEUVD-2011-2898 No score
Cumin in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0 records broker authentication credentials in a log file, which allows local users to bypass authentication and perform unauthorized actions on jobs and message queues via a direct connection to the broker.
- Record
EUVD-2011-2898- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-j3f2-xf7x-fhpq No score
Cumin in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0 records broker authentication...
Cumin in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0 records broker authentication credentials in a log file, which allows local users to bypass authentication and perform unauthorized actions on jobs and message queues via a direct connection to the broker.
- Record
GHSA-j3f2-xf7x-fhpq- Weakness
- CWE-287
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
condorRed Hat:enterprise_mrg:2::el5 |
before 0:7.6.3-0.3.el5 | 0:7.6.3-0.3.el5 |
condor-aviaryRed Hat:enterprise_mrg:2::el5 |
before 0:7.6.3-0.3.el5 | 0:7.6.3-0.3.el5 |
condor-classadsRed Hat:enterprise_mrg:2::el5 |
before 0:7.6.3-0.3.el5 | 0:7.6.3-0.3.el5 |
condor-debuginfoRed Hat:enterprise_mrg:2::el5 |
before 0:7.6.3-0.3.el5 | 0:7.6.3-0.3.el5 |
condor-ec2-enhancedRed Hat:enterprise_mrg:2::el5 |
before 0:1.2-2.el5 | 0:1.2-2.el5 |
condor-ec2-enhanced-hooksRed Hat:enterprise_mrg:2::el5 |
before 0:1.2-3.el5 | 0:1.2-3.el5 |
condor-job-hooksRed Hat:enterprise_mrg:2::el5 |
before 0:1.5-4.el5 | 0:1.5-4.el5 |
condor-kbddRed Hat:enterprise_mrg:2::el5 |
before 0:7.6.3-0.3.el5 | 0:7.6.3-0.3.el5 |
condor-low-latencyRed Hat:enterprise_mrg:2::el5 |
before 0:1.2-2.el5 | 0:1.2-2.el5 |
condor-qmfRed Hat:enterprise_mrg:2::el5 |
before 0:7.6.3-0.3.el5 | 0:7.6.3-0.3.el5 |
Show 50 moreShow less
| Package | Affected | Fixed |
|---|---|---|
condor-vm-gahpRed Hat:enterprise_mrg:2::el5 |
before 0:7.6.3-0.3.el5 | 0:7.6.3-0.3.el5 |
condor-wallabyRed Hat:enterprise_mrg:2::el5 |
before 0:4.1-4.el5 | 0:4.1-4.el5 |
condor-wallaby-base-dbRed Hat:enterprise_mrg:2::el5 |
before 0:1.14-1.el5 | 0:1.14-1.el5 |
condor-wallaby-clientRed Hat:enterprise_mrg:2::el5 |
before 0:4.1-4.el5 | 0:4.1-4.el5 |
condor-wallaby-toolsRed Hat:enterprise_mrg:2::el5 |
before 0:4.1-4.el5 | 0:4.1-4.el5 |
cuminRed Hat:enterprise_mrg:2::el5 |
before 0:0.1.4916-1.el5 | 0:0.1.4916-1.el5 |
python-condorec2eRed Hat:enterprise_mrg:2::el5 |
before 0:1.2-3.el5 | 0:1.2-3.el5 |
python-condorutilsRed Hat:enterprise_mrg:2::el5 |
before 0:1.5-4.el5 | 0:1.5-4.el5 |
python-wallabyclientRed Hat:enterprise_mrg:2::el5 |
before 0:4.1-4.el5 | 0:4.1-4.el5 |
ruby-rhubarbRed Hat:enterprise_mrg:2::el5 |
before 0:0.4.0-1.el5 | 0:0.4.0-1.el5 |
ruby-wallabyRed Hat:enterprise_mrg:2::el5 |
before 0:0.10.5-6.el5 | 0:0.10.5-6.el5 |
wallabyRed Hat:enterprise_mrg:2::el5 |
before 0:0.10.5-6.el5 | 0:0.10.5-6.el5 |
wallaby-utilsRed Hat:enterprise_mrg:2::el5 |
before 0:0.10.5-6.el5 | 0:0.10.5-6.el5 |
condorRed Hat:enterprise_mrg:2:computenode:el6 |
before 0:7.6.3-0.3.el6 | 0:7.6.3-0.3.el6 |
condor-classadsRed Hat:enterprise_mrg:2:computenode:el6 |
before 0:7.6.3-0.3.el6 | 0:7.6.3-0.3.el6 |
condor-debuginfoRed Hat:enterprise_mrg:2:computenode:el6 |
before 0:7.6.3-0.3.el6 | 0:7.6.3-0.3.el6 |
condor-job-hooksRed Hat:enterprise_mrg:2:computenode:el6 |
before 0:1.5-4.el6 | 0:1.5-4.el6 |
condor-kbddRed Hat:enterprise_mrg:2:computenode:el6 |
before 0:7.6.3-0.3.el6 | 0:7.6.3-0.3.el6 |
condor-low-latencyRed Hat:enterprise_mrg:2:computenode:el6 |
before 0:1.2-2.el6 | 0:1.2-2.el6 |
condor-qmfRed Hat:enterprise_mrg:2:computenode:el6 |
before 0:7.6.3-0.3.el6 | 0:7.6.3-0.3.el6 |
condor-vm-gahpRed Hat:enterprise_mrg:2:computenode:el6 |
before 0:7.6.3-0.3.el6 | 0:7.6.3-0.3.el6 |
condor-wallaby-base-dbRed Hat:enterprise_mrg:2:computenode:el6 |
before 0:1.14-1.el6 | 0:1.14-1.el6 |
python-condorutilsRed Hat:enterprise_mrg:2:computenode:el6 |
before 0:1.5-4.el6 | 0:1.5-4.el6 |
ruby-rhubarbRed Hat:enterprise_mrg:2:computenode:el6 |
before 0:0.4.0-1.el6 | 0:0.4.0-1.el6 |
ruby-wallabyRed Hat:enterprise_mrg:2:computenode:el6 |
before 0:0.10.5-6.el6 | 0:0.10.5-6.el6 |
wallabyRed Hat:enterprise_mrg:2:computenode:el6 |
before 0:0.10.5-6.el6 | 0:0.10.5-6.el6 |
wallaby-utilsRed Hat:enterprise_mrg:2:computenode:el6 |
before 0:0.10.5-6.el6 | 0:0.10.5-6.el6 |
condorRed Hat:enterprise_mrg:2:server:el6 |
before 0:7.6.3-0.3.el6 | 0:7.6.3-0.3.el6 |
condor-aviaryRed Hat:enterprise_mrg:2:server:el6 |
before 0:7.6.3-0.3.el6 | 0:7.6.3-0.3.el6 |
condor-classadsRed Hat:enterprise_mrg:2:server:el6 |
before 0:7.6.3-0.3.el6 | 0:7.6.3-0.3.el6 |
condor-debuginfoRed Hat:enterprise_mrg:2:server:el6 |
before 0:7.6.3-0.3.el6 | 0:7.6.3-0.3.el6 |
condor-ec2-enhancedRed Hat:enterprise_mrg:2:server:el6 |
before 0:1.2-2.el6 | 0:1.2-2.el6 |
condor-ec2-enhanced-hooksRed Hat:enterprise_mrg:2:server:el6 |
before 0:1.2-3.el6 | 0:1.2-3.el6 |
condor-job-hooksRed Hat:enterprise_mrg:2:server:el6 |
before 0:1.5-4.el6 | 0:1.5-4.el6 |
condor-kbddRed Hat:enterprise_mrg:2:server:el6 |
before 0:7.6.3-0.3.el6 | 0:7.6.3-0.3.el6 |
condor-low-latencyRed Hat:enterprise_mrg:2:server:el6 |
before 0:1.2-2.el6 | 0:1.2-2.el6 |
condor-qmfRed Hat:enterprise_mrg:2:server:el6 |
before 0:7.6.3-0.3.el6 | 0:7.6.3-0.3.el6 |
condor-vm-gahpRed Hat:enterprise_mrg:2:server:el6 |
before 0:7.6.3-0.3.el6 | 0:7.6.3-0.3.el6 |
condor-wallabyRed Hat:enterprise_mrg:2:server:el6 |
before 0:4.1-4.el6 | 0:4.1-4.el6 |
condor-wallaby-base-dbRed Hat:enterprise_mrg:2:server:el6 |
before 0:1.14-1.el6 | 0:1.14-1.el6 |
condor-wallaby-clientRed Hat:enterprise_mrg:2:server:el6 |
before 0:4.1-4.el6 | 0:4.1-4.el6 |
condor-wallaby-toolsRed Hat:enterprise_mrg:2:server:el6 |
before 0:4.1-4.el6 | 0:4.1-4.el6 |
cuminRed Hat:enterprise_mrg:2:server:el6 |
before 0:0.1.4916-1.el6 | 0:0.1.4916-1.el6 |
python-condorec2eRed Hat:enterprise_mrg:2:server:el6 |
before 0:1.2-3.el6 | 0:1.2-3.el6 |
python-condorutilsRed Hat:enterprise_mrg:2:server:el6 |
before 0:1.5-4.el6 | 0:1.5-4.el6 |
python-wallabyclientRed Hat:enterprise_mrg:2:server:el6 |
before 0:4.1-4.el6 | 0:4.1-4.el6 |
ruby-rhubarbRed Hat:enterprise_mrg:2:server:el6 |
before 0:0.4.0-1.el6 | 0:0.4.0-1.el6 |
ruby-wallabyRed Hat:enterprise_mrg:2:server:el6 |
before 0:0.10.5-6.el6 | 0:0.10.5-6.el6 |
wallabyRed Hat:enterprise_mrg:2:server:el6 |
before 0:0.10.5-6.el6 | 0:0.10.5-6.el6 |
wallaby-utilsRed Hat:enterprise_mrg:2:server:el6 |
before 0:0.10.5-6.el6 | 0:0.10.5-6.el6 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2011-2925 is a medium vulnerability (CVSS 4.6) in Redhat Enterprise Mrg, published September 19, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.39%, the 33rd percentile. Fixed in condor 0:7.6.3-0.3.el5.
References
securitytracker.com/id?1026021
secunia.com/advisories/45928
securityfocus.com/bid/49500
osvdb.org/75217
redhat.com/support/errata/RHSA-2011-1250.html
Show 78 moreShow less
bugzilla.redhat.com/show_bug.cgi?id=731574
exchange.xforce.ibmcloud.com/vulnerabilities/69659
nvd.nist.gov/vuln/detail/CVE-2011-2925
github.com/advisories/GHSA-j3f2-xf7x-fhpq
access.redhat.com/errata/RHSA-2011:1249
docs.redhat.com/docs/en-US/Red_Hat_Enterprise_MRG/2.0/html/Technical_Notes/index.html
security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_1249.json
cve.org/CVERecord?id=CVE-2011-2925