Every CVE Search/ Get API key

CVE-2012-2680

Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0,...

5.0 MediumFix available

Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, does not properly restrict access to resources, which allows remote attackers to obtain sensitive information via unspecified vectors related to (1) "web pages," (2) "export functionality," and (3) "image viewing."

Exploit likelihood

2.34%Up 1.0 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.0

Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, does not properly restrict access to resources, which allows remote attackers to obtain sensitive information via unspecified vectors related to (1) "web pages," (2) "export functionality," and (3) "image viewing."

Record
CVE-2012-2680
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:P/I:N/A:N
Weakness
CWE-264
Updated
2026-11-02
CVE List No score

Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, does not properly restrict access to resources, which allows remote attackers to obtain sensitive information via unspecified vectors related to (1) "web pages," (2) "export functionality," and (3) "image viewing."

Record
CVE-2012-2680
Updated
2026-11-02
EUVDEUVD-2012-2662 No score

Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, does not properly restrict access to resources, which allows remote attackers to obtain sensitive information via unspecified vectors related to (1) "web pages," (2) "export functionality," and (3) "image viewing."

Record
EUVD-2012-2662
Updated
2026-11-03
GitHub AdvisoriesGHSA-ggx8-566c-mc69 No score

Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0,...

Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, does not properly restrict access to resources, which allows remote attackers to obtain sensitive information via unspecified vectors related to (1) "web pages," (2) "export functionality," and (3) "image viewing."

Record
GHSA-ggx8-566c-mc69
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
condor
Red Hat:enterprise_mrg:2::el5
 before 0:7.6.5-0.22.el5
0:7.6.5-0.22.el5
condor-aviary
Red Hat:enterprise_mrg:2::el5
 before 0:7.6.5-0.22.el5
0:7.6.5-0.22.el5
condor-classads
Red Hat:enterprise_mrg:2::el5
 before 0:7.6.5-0.22.el5
0:7.6.5-0.22.el5
condor-debuginfo
Red Hat:enterprise_mrg:2::el5
 before 0:7.6.5-0.22.el5
0:7.6.5-0.22.el5
condor-kbdd
Red Hat:enterprise_mrg:2::el5
 before 0:7.6.5-0.22.el5
0:7.6.5-0.22.el5
condor-qmf
Red Hat:enterprise_mrg:2::el5
 before 0:7.6.5-0.22.el5
0:7.6.5-0.22.el5
condor-vm-gahp
Red Hat:enterprise_mrg:2::el5
 before 0:7.6.5-0.22.el5
0:7.6.5-0.22.el5
condor-wallaby
Red Hat:enterprise_mrg:2::el5
 before 0:4.1.3-1.el5
0:4.1.3-1.el5
condor-wallaby-base-db
Red Hat:enterprise_mrg:2::el5
 before 0:1.23-1.el5
0:1.23-1.el5
condor-wallaby-client
Red Hat:enterprise_mrg:2::el5
 before 0:4.1.3-1.el5
0:4.1.3-1.el5
Show 94 moreShow less
Affected packages
PackageAffectedFixed
condor-wallaby-tools
Red Hat:enterprise_mrg:2::el5
 before 0:4.1.3-1.el5
0:4.1.3-1.el5
cumin
Red Hat:enterprise_mrg:2::el5
 before 0:0.1.5444-3.el5
0:0.1.5444-3.el5
python-wallaby
Red Hat:enterprise_mrg:2::el5
 before 0:0.12.5-10.el5
0:0.12.5-10.el5
python-wallabyclient
Red Hat:enterprise_mrg:2::el5
 before 0:4.1.3-1.el5
0:4.1.3-1.el5
ruby-wallaby
Red Hat:enterprise_mrg:2::el5
 before 0:0.12.5-10.el5
0:0.12.5-10.el5
sesame
Red Hat:enterprise_mrg:2::el5
 before 0:1.0-4.el5
0:1.0-4.el5
sesame-debuginfo
Red Hat:enterprise_mrg:2::el5
 before 0:1.0-4.el5
0:1.0-4.el5
wallaby
Red Hat:enterprise_mrg:2::el5
 before 0:0.12.5-10.el5
0:0.12.5-10.el5
wallaby-utils
Red Hat:enterprise_mrg:2::el5
 before 0:0.12.5-10.el5
0:0.12.5-10.el5
condor
Red Hat:enterprise_mrg:2:computenode:el6
 before 0:7.6.5-0.22.el6
0:7.6.5-0.22.el6
condor-classads
Red Hat:enterprise_mrg:2:computenode:el6
 before 0:7.6.5-0.22.el6
0:7.6.5-0.22.el6
condor-debuginfo
Red Hat:enterprise_mrg:2:computenode:el6
 before 0:7.6.5-0.22.el6
0:7.6.5-0.22.el6
condor-kbdd
Red Hat:enterprise_mrg:2:computenode:el6
 before 0:7.6.5-0.22.el6
0:7.6.5-0.22.el6
condor-qmf
Red Hat:enterprise_mrg:2:computenode:el6
 before 0:7.6.5-0.22.el6
0:7.6.5-0.22.el6
condor-vm-gahp
Red Hat:enterprise_mrg:2:computenode:el6
 before 0:7.6.5-0.22.el6
0:7.6.5-0.22.el6
condor-wallaby
Red Hat:enterprise_mrg:2:computenode:el6
 before 0:4.1.3-1.el6
0:4.1.3-1.el6
condor-wallaby-base-db
Red Hat:enterprise_mrg:2:computenode:el6
 before 0:1.23-1.el6
0:1.23-1.el6
condor-wallaby-client
Red Hat:enterprise_mrg:2:computenode:el6
 before 0:4.1.3-1.el6
0:4.1.3-1.el6
condor-wallaby-tools
Red Hat:enterprise_mrg:2:computenode:el6
 before 0:4.1.3-1.el6
0:4.1.3-1.el6
python-wallabyclient
Red Hat:enterprise_mrg:2:computenode:el6
 before 0:4.1.3-1.el6
0:4.1.3-1.el6
ruby-wallaby
Red Hat:enterprise_mrg:2:computenode:el6
 before 0:0.12.5-10.el6
0:0.12.5-10.el6
rubygem-rake
Red Hat:enterprise_mrg:2:computenode:el6
 before 0:0.8.7-2.1.el6
0:0.8.7-2.1.el6
rubygems
Red Hat:enterprise_mrg:2:computenode:el6
 before 0:1.8.16-1.el6
0:1.8.16-1.el6
wallaby
Red Hat:enterprise_mrg:2:computenode:el6
 before 0:0.12.5-10.el6
0:0.12.5-10.el6
wallaby-utils
Red Hat:enterprise_mrg:2:computenode:el6
 before 0:0.12.5-10.el6
0:0.12.5-10.el6
sesame
Red Hat:enterprise_mrg:2:computenode:el6
 before 0:1.0-6.el6
0:1.0-6.el6
sesame-debuginfo
Red Hat:enterprise_mrg:2:computenode:el6
 before 0:1.0-6.el6
0:1.0-6.el6
condor
Red Hat:enterprise_mrg:2:server:el6
 before 0:7.6.5-0.22.el6
0:7.6.5-0.22.el6
condor-aviary
Red Hat:enterprise_mrg:2:server:el6
 before 0:7.6.5-0.22.el6
0:7.6.5-0.22.el6
condor-classads
Red Hat:enterprise_mrg:2:server:el6
 before 0:7.6.5-0.22.el6
0:7.6.5-0.22.el6
condor-cluster-resource-agent
Red Hat:enterprise_mrg:2:server:el6
 before 0:7.6.5-0.22.el6
0:7.6.5-0.22.el6
condor-debuginfo
Red Hat:enterprise_mrg:2:server:el6
 before 0:7.6.5-0.22.el6
0:7.6.5-0.22.el6
condor-deltacloud-gahp
Red Hat:enterprise_mrg:2:server:el6
 before 0:7.6.5-0.22.el6
0:7.6.5-0.22.el6
condor-kbdd
Red Hat:enterprise_mrg:2:server:el6
 before 0:7.6.5-0.22.el6
0:7.6.5-0.22.el6
condor-plumage
Red Hat:enterprise_mrg:2:server:el6
 before 0:7.6.5-0.22.el6
0:7.6.5-0.22.el6
condor-qmf
Red Hat:enterprise_mrg:2:server:el6
 before 0:7.6.5-0.22.el6
0:7.6.5-0.22.el6
condor-vm-gahp
Red Hat:enterprise_mrg:2:server:el6
 before 0:7.6.5-0.22.el6
0:7.6.5-0.22.el6
condor-wallaby
Red Hat:enterprise_mrg:2:server:el6
 before 0:4.1.3-1.el6
0:4.1.3-1.el6
condor-wallaby-base-db
Red Hat:enterprise_mrg:2:server:el6
 before 0:1.23-1.el6
0:1.23-1.el6
condor-wallaby-client
Red Hat:enterprise_mrg:2:server:el6
 before 0:4.1.3-1.el6
0:4.1.3-1.el6
condor-wallaby-tools
Red Hat:enterprise_mrg:2:server:el6
 before 0:4.1.3-1.el6
0:4.1.3-1.el6
cumin
Red Hat:enterprise_mrg:2:server:el6
 before 0:0.1.5444-3.el6
0:0.1.5444-3.el6
deltacloud-core
Red Hat:enterprise_mrg:2:server:el6
 before 0:0.5.0-10.el6_2
0:0.5.0-10.el6_2
deltacloud-core-doc
Red Hat:enterprise_mrg:2:server:el6
 before 0:0.5.0-10.el6_2
0:0.5.0-10.el6_2
deltacloud-core-rhevm
Red Hat:enterprise_mrg:2:server:el6
 before 0:0.5.0-10.el6_2
0:0.5.0-10.el6_2
libdeltacloud
Red Hat:enterprise_mrg:2:server:el6
 before 0:0.9-1.el6
0:0.9-1.el6
libdeltacloud-debuginfo
Red Hat:enterprise_mrg:2:server:el6
 before 0:0.9-1.el6
0:0.9-1.el6
libdeltacloud-devel
Red Hat:enterprise_mrg:2:server:el6
 before 0:0.9-1.el6
0:0.9-1.el6
python-wallaby
Red Hat:enterprise_mrg:2:server:el6
 before 0:0.12.5-10.el6
0:0.12.5-10.el6
python-wallabyclient
Red Hat:enterprise_mrg:2:server:el6
 before 0:4.1.3-1.el6
0:4.1.3-1.el6
ruby-hpricot
Red Hat:enterprise_mrg:2:server:el6
 before 0:0.8.4-2.el6
0:0.8.4-2.el6
ruby-json
Red Hat:enterprise_mrg:2:server:el6
 before 0:1.4.6-10.el6
0:1.4.6-10.el6
ruby-nokogiri
Red Hat:enterprise_mrg:2:server:el6
 before 0:1.5.0-0.8.beta4.el6
0:1.5.0-0.8.beta4.el6
ruby-wallaby
Red Hat:enterprise_mrg:2:server:el6
 before 0:0.12.5-10.el6
0:0.12.5-10.el6
rubygem-daemons
Red Hat:enterprise_mrg:2:server:el6
 before 0:1.1.4-2.el6
0:1.1.4-2.el6
rubygem-eventmachine
Red Hat:enterprise_mrg:2:server:el6
 before 0:0.12.10-7.el6
0:0.12.10-7.el6
rubygem-eventmachine-debuginfo
Red Hat:enterprise_mrg:2:server:el6
 before 0:0.12.10-7.el6
0:0.12.10-7.el6
rubygem-fssm
Red Hat:enterprise_mrg:2:server:el6
 before 0:0.2.7-1.el6
0:0.2.7-1.el6
rubygem-haml
Red Hat:enterprise_mrg:2:server:el6
 before 0:3.1.2-2.el6
0:3.1.2-2.el6
rubygem-hpricot
Red Hat:enterprise_mrg:2:server:el6
 before 0:0.8.4-2.el6
0:0.8.4-2.el6
rubygem-hpricot-debuginfo
Red Hat:enterprise_mrg:2:server:el6
 before 0:0.8.4-2.el6
0:0.8.4-2.el6
rubygem-hpricot-doc
Red Hat:enterprise_mrg:2:server:el6
 before 0:0.8.4-2.el6
0:0.8.4-2.el6
rubygem-json
Red Hat:enterprise_mrg:2:server:el6
 before 0:1.4.6-10.el6
0:1.4.6-10.el6
rubygem-json-debuginfo
Red Hat:enterprise_mrg:2:server:el6
 before 0:1.4.6-10.el6
0:1.4.6-10.el6
rubygem-maruku
Red Hat:enterprise_mrg:2:server:el6
 before 0:0.6.0-4.el6
0:0.6.0-4.el6
rubygem-mime-types
Red Hat:enterprise_mrg:2:server:el6
 before 0:1.16-4.el6_0
0:1.16-4.el6_0
rubygem-mime-types-doc
Red Hat:enterprise_mrg:2:server:el6
 before 0:1.16-4.el6_0
0:1.16-4.el6_0
rubygem-mocha
Red Hat:enterprise_mrg:2:server:el6
 before 0:0.9.7-4.el6
0:0.9.7-4.el6
rubygem-net-ssh
Red Hat:enterprise_mrg:2:server:el6
 before 0:2.0.23-6.el6_0
0:2.0.23-6.el6_0
rubygem-net-ssh-doc
Red Hat:enterprise_mrg:2:server:el6
 before 0:2.0.23-6.el6_0
0:2.0.23-6.el6_0
rubygem-nokogiri
Red Hat:enterprise_mrg:2:server:el6
 before 0:1.5.0-0.8.beta4.el6
0:1.5.0-0.8.beta4.el6
rubygem-nokogiri-debuginfo
Red Hat:enterprise_mrg:2:server:el6
 before 0:1.5.0-0.8.beta4.el6
0:1.5.0-0.8.beta4.el6
rubygem-nokogiri-doc
Red Hat:enterprise_mrg:2:server:el6
 before 0:1.5.0-0.8.beta4.el6
0:1.5.0-0.8.beta4.el6
rubygem-rack
Red Hat:enterprise_mrg:2:server:el6
 before 1:1.3.0-2.el6
1:1.3.0-2.el6
rubygem-rack-accept
Red Hat:enterprise_mrg:2:server:el6
 before 0:0.4.3-6.el6_0
0:0.4.3-6.el6_0
rubygem-rack-accept-doc
Red Hat:enterprise_mrg:2:server:el6
 before 0:0.4.3-6.el6_0
0:0.4.3-6.el6_0
rubygem-rack-test
Red Hat:enterprise_mrg:2:server:el6
 before 0:0.6.1-1.el6
0:0.6.1-1.el6
rubygem-rake
Red Hat:enterprise_mrg:2:server:el6
 before 0:0.8.7-2.1.el6
0:0.8.7-2.1.el6
rubygem-rest-client
Red Hat:enterprise_mrg:2:server:el6
 before 0:1.6.1-2.el6_0
0:1.6.1-2.el6_0
rubygem-sass
Red Hat:enterprise_mrg:2:server:el6
 before 0:3.1.4-4.el6
0:3.1.4-4.el6
rubygem-sass-doc
Red Hat:enterprise_mrg:2:server:el6
 before 0:3.1.4-4.el6
0:3.1.4-4.el6
rubygem-sinatra
Red Hat:enterprise_mrg:2:server:el6
 before 1:1.2.6-2.el6
1:1.2.6-2.el6
rubygem-syntax
Red Hat:enterprise_mrg:2:server:el6
 before 0:1.0.0-4.el6
0:1.0.0-4.el6
rubygem-thin
Red Hat:enterprise_mrg:2:server:el6
 before 0:1.2.11-3.el6
0:1.2.11-3.el6
rubygem-thin-debuginfo
Red Hat:enterprise_mrg:2:server:el6
 before 0:1.2.11-3.el6
0:1.2.11-3.el6
rubygem-thin-doc
Red Hat:enterprise_mrg:2:server:el6
 before 0:1.2.11-3.el6
0:1.2.11-3.el6
rubygem-tilt
Red Hat:enterprise_mrg:2:server:el6
 before 0:1.3.2-3.el6
0:1.3.2-3.el6
rubygem-tilt-doc
Red Hat:enterprise_mrg:2:server:el6
 before 0:1.3.2-3.el6
0:1.3.2-3.el6
rubygem-yard
Red Hat:enterprise_mrg:2:server:el6
 before 0:0.7.2-1.el6
0:0.7.2-1.el6
rubygems
Red Hat:enterprise_mrg:2:server:el6
 before 0:1.8.16-1.el6
0:1.8.16-1.el6
sesame
Red Hat:enterprise_mrg:2:server:el6
 before 0:1.0-6.el6
0:1.0-6.el6
sesame-debuginfo
Red Hat:enterprise_mrg:2:server:el6
 before 0:1.0-6.el6
0:1.0-6.el6
wallaby
Red Hat:enterprise_mrg:2:server:el6
 before 0:0.12.5-10.el6
0:0.12.5-10.el6
wallaby-utils
Red Hat:enterprise_mrg:2:server:el6
 before 0:0.12.5-10.el6
0:0.12.5-10.el6

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2012-2680 is a medium vulnerability (CVSS 5.0) in Trevor Mckay Cumin, published September 28, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.34%, the 83rd percentile. Fixed in condor 0:7.6.5-0.22.el5.

References

Show 65 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open