{"id":"CVE-2012-2684","aliases":["EUVD-2012-2666","GHSA-364j-8jm7-f886","RHSA-2012:1278","RHSA-2012:1281"],"status":"published","title":"Multiple SQL injection vulnerabilities in the get_sample_filters_by_signature function in Cumin...","description":"Multiple SQL injection vulnerabilities in the get_sample_filters_by_signature function in Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, allow remote attackers to execute arbitrary SQL commands via the (1) agent or (2) object id.","severity":{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.02125,"percentile":0.82041,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-89"],"published":"2012-09-28T17:00:00Z","modified":"2026-06-28T10:06:44Z","affected":[{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"condor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.5-0.22.el5"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"condor-aviary","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.5-0.22.el5"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"condor-classads","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.5-0.22.el5"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"condor-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.5-0.22.el5"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"condor-kbdd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.5-0.22.el5"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"condor-qmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.5-0.22.el5"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"condor-vm-gahp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.5-0.22.el5"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"condor-wallaby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.3-1.el5"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"condor-wallaby-base-db","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.23-1.el5"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"condor-wallaby-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.3-1.el5"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"condor-wallaby-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.3-1.el5"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"cumin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.5444-3.el5"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"python-wallaby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.5-10.el5"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"python-wallabyclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.3-1.el5"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"ruby-wallaby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.5-10.el5"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"sesame","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-4.el5"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"sesame-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-4.el5"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"wallaby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.5-10.el5"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"wallaby-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.5-10.el5"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"condor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.5-0.22.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"condor-classads","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.5-0.22.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"condor-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.5-0.22.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"condor-kbdd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.5-0.22.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"condor-qmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.5-0.22.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"condor-vm-gahp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.5-0.22.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"condor-wallaby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.3-1.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"condor-wallaby-base-db","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.23-1.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"condor-wallaby-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.3-1.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"condor-wallaby-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.3-1.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"python-wallabyclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.3-1.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"ruby-wallaby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.5-10.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"rubygem-rake","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.7-2.1.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"rubygems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.16-1.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"wallaby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.5-10.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"wallaby-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.5-10.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"sesame","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-6.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"sesame-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-6.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"condor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.5-0.22.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"condor-aviary","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.5-0.22.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"condor-classads","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.5-0.22.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"condor-cluster-resource-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.5-0.22.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"condor-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.5-0.22.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"condor-deltacloud-gahp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.5-0.22.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"condor-kbdd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.5-0.22.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"condor-plumage","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.5-0.22.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"condor-qmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.5-0.22.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"condor-vm-gahp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.5-0.22.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"condor-wallaby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.3-1.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"condor-wallaby-base-db","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.23-1.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"condor-wallaby-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.3-1.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"condor-wallaby-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.3-1.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"cumin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.5444-3.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"deltacloud-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.0-10.el6_2"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"deltacloud-core-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.0-10.el6_2"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"deltacloud-core-rhevm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.0-10.el6_2"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"libdeltacloud","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9-1.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"libdeltacloud-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9-1.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"libdeltacloud-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9-1.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"python-wallaby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.5-10.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"python-wallabyclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.3-1.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"ruby-hpricot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.4-2.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"ruby-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.6-10.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"ruby-nokogiri","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.0-0.8.beta4.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"ruby-wallaby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.5-10.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"rubygem-daemons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.4-2.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"rubygem-eventmachine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.10-7.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"rubygem-eventmachine-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.10-7.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"rubygem-fssm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.7-1.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"rubygem-haml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.2-2.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"rubygem-hpricot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.4-2.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"rubygem-hpricot-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.4-2.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"rubygem-hpricot-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.4-2.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"rubygem-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.6-10.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"rubygem-json-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.6-10.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"rubygem-maruku","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.0-4.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"rubygem-mime-types","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16-4.el6_0"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"rubygem-mime-types-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16-4.el6_0"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"rubygem-mocha","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7-4.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"rubygem-net-ssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.23-6.el6_0"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"rubygem-net-ssh-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.23-6.el6_0"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"rubygem-nokogiri","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.0-0.8.beta4.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"rubygem-nokogiri-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.0-0.8.beta4.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"rubygem-nokogiri-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.0-0.8.beta4.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"rubygem-rack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.3.0-2.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"rubygem-rack-accept","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.3-6.el6_0"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"rubygem-rack-accept-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.3-6.el6_0"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"rubygem-rack-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.1-1.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"rubygem-rake","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.7-2.1.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"rubygem-rest-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-2.el6_0"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"rubygem-sass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.4-4.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"rubygem-sass-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.4-4.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"rubygem-sinatra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.6-2.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"rubygem-syntax","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-4.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"rubygem-thin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.11-3.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"rubygem-thin-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.11-3.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"rubygem-thin-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.11-3.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"rubygem-tilt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-3.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"rubygem-tilt-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-3.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"rubygem-yard","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.2-1.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"rubygems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.16-1.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"sesame","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-6.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"sesame-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-6.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"wallaby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.5-10.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"wallaby-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.5-10.el6"}]}],"bundled":11}],"products":[{"vendor":"redhat","product":"enterprise_mrg"},{"vendor":"trevor_mckay","product":"cumin"}],"references":[{"url":"http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=830245","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092562.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"]},{"url":"http://www.securityfocus.com/bid/55618","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2012-1278.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2012-1281.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Vendor Advisory"]},{"url":"http://secunia.com/advisories/50660","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092543.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-2684","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-364j-8jm7-f886"},{"url":"https://access.redhat.com/errata/RHSA-2012:1278","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/knowledge/docs/en-US/Red_Hat_Enterprise_MRG/2/html/Technical_Notes/sec-Red_Hat_Enterprise_Linux_5.html#RHSA-2012-1278","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=721110","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=748507","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=769573","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=794660","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=799838","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=806071","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=806079","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=807738","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=810519","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=812126","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=827558","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=829421","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=830243","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=830245","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=830248","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=832124","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=832151","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=846501","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=848212","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=848214","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=848218","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=848222","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=852321","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1278.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-2680","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-2680","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-2680","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-2681","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-2681","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-2681","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-2683","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-2683","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-2683","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-2684","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-2684","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-2685","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-2685","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-2685","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-2734","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-2734","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-2734","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-2735","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-2735","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-2735","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-3459","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-3459","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-3459","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-3491","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-3491","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-3491","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-3492","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-3492","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-3492","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-3493","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-3493","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-3493","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2012:1281","tags":["advisory"]},{"url":"https://access.redhat.com/knowledge/docs/en-US/Red_Hat_Enterprise_MRG/2/html/Technical_Notes/sec-Red_Hat_Enterprise_Linux_6.html#RHSA-2012-1281","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=828434","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1281.json","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2012-2684","description":"Multiple SQL injection vulnerabilities in the get_sample_filters_by_signature function in Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, allow remote attackers to execute arbitrary SQL commands via the (1) agent or (2) object id.","status":"published","published":"2012-09-28T17:00:00Z","modified":"2024-08-06T19:42:31.884Z","updated_at":"2026-11-02T14:34:49.937255Z"}],"euvd":[{"id":"EUVD-2012-2666","description":"Multiple SQL injection vulnerabilities in the get_sample_filters_by_signature function in Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, allow remote attackers to execute arbitrary SQL commands via the (1) agent or (2) object id.","status":"published","published":"2012-09-28T17:00:00Z","modified":"2024-08-06T19:42:31Z","updated_at":"2026-11-03T01:56:13.895728Z"}],"ghsa":[{"id":"GHSA-364j-8jm7-f886","title":"Multiple SQL injection vulnerabilities in the get_sample_filters_by_signature function in Cumin...","description":"Multiple SQL injection vulnerabilities in the get_sample_filters_by_signature function in Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, allow remote attackers to execute arbitrary SQL commands via the (1) agent or (2) object id.","status":"published","published":"2022-05-13T01:08:39Z","modified":"2023-02-01T05:03:16Z","cwes":["CWE-89"],"updated_at":"2026-11-02T14:50:02.739665Z"}],"nvd":[{"id":"CVE-2012-2684","description":"Multiple SQL injection vulnerabilities in the get_sample_filters_by_signature function in Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, allow remote attackers to execute arbitrary SQL commands via the (1) agent or (2) object id.","status":"published","published":"2012-09-28T17:55:00.913Z","modified":"2026-06-16T23:41:52.45Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:02:16.115119Z"}],"osv":[{"id":"RHSA-2012:1278","title":"Red Hat Security Advisory: Red Hat Enterprise MRG Grid 2.2 security update","status":"published","published":"2024-09-15T19:57:58Z","modified":"2026-06-28T10:06:43Z","updated_at":"2026-11-02T15:53:01.495018Z"},{"id":"RHSA-2012:1281","title":"Red Hat Security Advisory: Red Hat Enterprise MRG Grid 2.2 security update","status":"published","published":"2024-09-15T19:58:03Z","modified":"2026-06-28T10:06:44Z","updated_at":"2026-11-02T15:53:01.495018Z"}]}}