CVE-2012-2743
Revelation 0.4.13-2 and earlier does not iterate through SHA hashing algorithms for AES...
Revelation 0.4.13-2 and earlier does not iterate through SHA hashing algorithms for AES encryption, which makes it easier for context-dependent attackers to guess passwords via a brute force attack.
Exploit likelihood
What each source reports
NVD Score used
Revelation 0.4.13-2 and earlier does not iterate through SHA hashing algorithms for AES encryption, which makes it easier for context-dependent attackers to guess passwords via a brute force attack.
- Record
CVE-2012-2743- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-255
- Updated
- 2026-11-02
CVE List No score
Revelation 0.4.13-2 and earlier does not iterate through SHA hashing algorithms for AES encryption, which makes it easier for context-dependent attackers to guess passwords via a brute force attack.
- Record
CVE-2012-2743- Updated
- 2026-11-02
EUVDEUVD-2012-2723 No score
Revelation 0.4.13-2 and earlier does not iterate through SHA hashing algorithms for AES encryption, which makes it easier for context-dependent attackers to guess passwords via a brute force attack.
- Record
EUVD-2012-2723- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-gfcf-47fv-3q9j No score
Revelation 0.4.13-2 and earlier does not iterate through SHA hashing algorithms for AES...
Revelation 0.4.13-2 and earlier does not iterate through SHA hashing algorithms for AES encryption, which makes it easier for context-dependent attackers to guess passwords via a brute force attack.
- Record
GHSA-gfcf-47fv-3q9j- Updated
- 2026-11-02
OSV No score
Revelation 0.4.13-2 and earlier does not iterate through SHA hashing algorithms for AES encryption, which makes it easier for context-dependent attackers to guess passwords via a brute force attack.
- Record
CVE-2012-2743- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-2743 No score
Revelation 0.4.13-2 and earlier does not iterate through SHA hashing algorithms for AES encryption, which makes it easier for context-dependent attackers to guess passwords via a brute force attack.
- Record
DEBIAN-CVE-2012-2743- Updated
- 2026-11-02
OSVUBUNTU-CVE-2012-2743 No score
Revelation 0.4.13-2 and earlier does not iterate through SHA hashing algorithms for AES encryption, which makes it easier for context-dependent attackers to guess passwords via a brute force attack.
- Record
UBUNTU-CVE-2012-2743- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
revelationDebian:12 |
before 0.4.11-10 | 0.4.11-10 |
revelationDebian:13 |
before 0.4.11-10 | 0.4.11-10 |
revelationDebian:14 |
before 0.4.11-10 | 0.4.11-10 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-2743 is a medium vulnerability (CVSS 5.0) in Mikel Olasagasti Revelation, published June 27, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.11%, the 65th percentile. Fixed in revelation 0.4.11-10.
