CVE-2012-2742
Revelation 0.4.13-2 and earlier uses only the first 32 characters of a password followed by a...
Revelation 0.4.13-2 and earlier uses only the first 32 characters of a password followed by a sequence of zeros, which reduces the entropy and makes it easier for context-dependent attackers to crack passwords and obtain access to keys via a brute-force attack.
Exploit likelihood
What each source reports
NVD Score used
Revelation 0.4.13-2 and earlier uses only the first 32 characters of a password followed by a sequence of zeros, which reduces the entropy and makes it easier for context-dependent attackers to crack passwords and obtain access to keys via a brute-force attack.
- Record
CVE-2012-2742- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-255
- Updated
- 2026-11-02
CVE List No score
Revelation 0.4.13-2 and earlier uses only the first 32 characters of a password followed by a sequence of zeros, which reduces the entropy and makes it easier for context-dependent attackers to crack passwords and obtain access to keys via a brute-force attack.
- Record
CVE-2012-2742- Updated
- 2026-11-02
EUVDEUVD-2012-2722 No score
Revelation 0.4.13-2 and earlier uses only the first 32 characters of a password followed by a sequence of zeros, which reduces the entropy and makes it easier for context-dependent attackers to crack passwords and obtain access to keys via a brute-force attack.
- Record
EUVD-2012-2722- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-48w5-fx89-4hg4 No score
Revelation 0.4.13-2 and earlier uses only the first 32 characters of a password followed by a...
Revelation 0.4.13-2 and earlier uses only the first 32 characters of a password followed by a sequence of zeros, which reduces the entropy and makes it easier for context-dependent attackers to crack passwords and obtain access to keys via a brute-force attack.
- Record
GHSA-48w5-fx89-4hg4- Updated
- 2026-11-02
OSV No score
Revelation 0.4.13-2 and earlier uses only the first 32 characters of a password followed by a sequence of zeros, which reduces the entropy and makes it easier for context-dependent attackers to crack passwords and obtain access to keys via a brute-force attack.
- Record
CVE-2012-2742- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-2742 No score
Revelation 0.4.13-2 and earlier uses only the first 32 characters of a password followed by a sequence of zeros, which reduces the entropy and makes it easier for context-dependent attackers to crack passwords and obtain access to keys via a brute-force attack.
- Record
DEBIAN-CVE-2012-2742- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
revelationDebian:12 |
before 0.4.11-10 | 0.4.11-10 |
revelationDebian:13 |
before 0.4.11-10 | 0.4.11-10 |
revelationDebian:14 |
before 0.4.11-10 | 0.4.11-10 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-2742 is a medium vulnerability (CVSS 5.0) in Mikel Olasagasti Revelation, published June 27, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.80%, the 78th percentile. Fixed in revelation 0.4.11-10.
