CVE-2012-2743
Revelation 0.4.13-2 and earlier does not iterate through SHA hashing algorithms for AES...
Revelation 0.4.13-2 and earlier does not iterate through SHA hashing algorithms for AES encryption, which makes it easier for context-dependent attackers to guess passwords via a brute force attack.
Exploit likelihood
What each source reports
NVD Score used
Revelation 0.4.13-2 and earlier does not iterate through SHA hashing algorithms for AES encryption, which makes it easier for context-dependent attackers to guess passwords via a brute force attack.
- Record
CVE-2012-2743- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-255
- Updated
- 2026-11-02
CVE ListNo score
Revelation 0.4.13-2 and earlier does not iterate through SHA hashing algorithms for AES encryption, which makes it easier for context-dependent attackers to guess passwords via a brute force attack.
- Record
CVE-2012-2743- Updated
- 2026-11-02
EUVDEUVD-2012-2723No score
Revelation 0.4.13-2 and earlier does not iterate through SHA hashing algorithms for AES encryption, which makes it easier for context-dependent attackers to guess passwords via a brute force attack.
- Record
EUVD-2012-2723- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-gfcf-47fv-3q9jNo score
Revelation 0.4.13-2 and earlier does not iterate through SHA hashing algorithms for AES...
Revelation 0.4.13-2 and earlier does not iterate through SHA hashing algorithms for AES encryption, which makes it easier for context-dependent attackers to guess passwords via a brute force attack.
- Record
GHSA-gfcf-47fv-3q9j- Updated
- 2026-11-02
OSVNo score
Revelation 0.4.13-2 and earlier does not iterate through SHA hashing algorithms for AES encryption, which makes it easier for context-dependent attackers to guess passwords via a brute force attack.
- Record
CVE-2012-2743- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-2743No score
Revelation 0.4.13-2 and earlier does not iterate through SHA hashing algorithms for AES encryption, which makes it easier for context-dependent attackers to guess passwords via a brute force attack.
- Record
DEBIAN-CVE-2012-2743- Updated
- 2026-11-02
OSVUBUNTU-CVE-2012-2743No score
Revelation 0.4.13-2 and earlier does not iterate through SHA hashing algorithms for AES encryption, which makes it easier for context-dependent attackers to guess passwords via a brute force attack.
- Record
UBUNTU-CVE-2012-2743- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
revelationDebian:12 | before 0.4.11-10 | 0.4.11-10 |
revelationDebian:13 | before 0.4.11-10 | 0.4.11-10 |
revelationDebian:14 | before 0.4.11-10 | 0.4.11-10 |
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-2743 is a medium vulnerability (CVSS 5.0) in Mikel Olasagasti Revelation, published June 27, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.11%, the 66th percentile. Fixed in revelation 0.4.11-10.
