{"id":"CVE-2012-2734","aliases":["EUVD-2012-2714","GHSA-jvfp-hmwp-7chr","RHSA-2012:1278","RHSA-2012:1281"],"status":"published","title":"Multiple cross-site request forgery (CSRF) vulnerabilities in Cumin before 0.1.5444, as used in...","description":"Multiple cross-site request forgery (CSRF) vulnerabilities in Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, allow remote attackers to hijack the authentication of arbitrary users for requests that execute commands via unspecified vectors.","severity":{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00917,"percentile":0.60455,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-352"],"published":"2012-09-28T17:00:00Z","modified":"2026-06-28T10:06:44Z","affected":[{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"condor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.5-0.22.el5"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"condor-aviary","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.5-0.22.el5"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"condor-classads","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.5-0.22.el5"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"condor-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.5-0.22.el5"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"condor-kbdd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.5-0.22.el5"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"condor-qmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.5-0.22.el5"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"condor-vm-gahp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.5-0.22.el5"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"condor-wallaby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.3-1.el5"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"condor-wallaby-base-db","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.23-1.el5"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"condor-wallaby-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.3-1.el5"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"condor-wallaby-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.3-1.el5"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"cumin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.5444-3.el5"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"python-wallaby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.5-10.el5"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"python-wallabyclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.3-1.el5"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"ruby-wallaby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.5-10.el5"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"sesame","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-4.el5"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"sesame-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-4.el5"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"wallaby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.5-10.el5"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"wallaby-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.5-10.el5"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"condor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.5-0.22.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"condor-classads","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.5-0.22.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"condor-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.5-0.22.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"condor-kbdd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.5-0.22.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"condor-qmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.5-0.22.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"condor-vm-gahp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.5-0.22.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"condor-wallaby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.3-1.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"condor-wallaby-base-db","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.23-1.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"condor-wallaby-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.3-1.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"condor-wallaby-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.3-1.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"python-wallabyclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.3-1.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"ruby-wallaby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.5-10.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"rubygem-rake","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.7-2.1.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"rubygems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.16-1.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"wallaby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.5-10.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"wallaby-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.5-10.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"sesame","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-6.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"sesame-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-6.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"condor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.5-0.22.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"condor-aviary","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.5-0.22.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"condor-classads","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.5-0.22.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"condor-cluster-resource-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.5-0.22.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"condor-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.5-0.22.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"condor-deltacloud-gahp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.5-0.22.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"condor-kbdd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.5-0.22.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"condor-plumage","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.5-0.22.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"condor-qmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.5-0.22.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"condor-vm-gahp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.5-0.22.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"condor-wallaby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.3-1.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"condor-wallaby-base-db","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.23-1.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"condor-wallaby-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.3-1.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"condor-wallaby-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.3-1.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"cumin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.5444-3.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"deltacloud-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.0-10.el6_2"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"deltacloud-core-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.0-10.el6_2"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"deltacloud-core-rhevm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.0-10.el6_2"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"libdeltacloud","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9-1.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"libdeltacloud-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9-1.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"libdeltacloud-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9-1.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"python-wallaby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.5-10.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"python-wallabyclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.3-1.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"ruby-hpricot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.4-2.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"ruby-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.6-10.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"ruby-nokogiri","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.0-0.8.beta4.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"ruby-wallaby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.5-10.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"rubygem-daemons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.4-2.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"rubygem-eventmachine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.10-7.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"rubygem-eventmachine-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.10-7.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"rubygem-fssm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.7-1.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"rubygem-haml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.2-2.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"rubygem-hpricot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.4-2.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"rubygem-hpricot-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.4-2.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"rubygem-hpricot-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.4-2.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"rubygem-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.6-10.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"rubygem-json-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.6-10.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"rubygem-maruku","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.0-4.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"rubygem-mime-types","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16-4.el6_0"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"rubygem-mime-types-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16-4.el6_0"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"rubygem-mocha","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7-4.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"rubygem-net-ssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.23-6.el6_0"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"rubygem-net-ssh-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.23-6.el6_0"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"rubygem-nokogiri","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.0-0.8.beta4.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"rubygem-nokogiri-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.0-0.8.beta4.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"rubygem-nokogiri-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.0-0.8.beta4.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"rubygem-rack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.3.0-2.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"rubygem-rack-accept","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.3-6.el6_0"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"rubygem-rack-accept-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.3-6.el6_0"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"rubygem-rack-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.1-1.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"rubygem-rake","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.7-2.1.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"rubygem-rest-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-2.el6_0"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"rubygem-sass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.4-4.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"rubygem-sass-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.4-4.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"rubygem-sinatra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.6-2.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"rubygem-syntax","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-4.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"rubygem-thin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.11-3.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"rubygem-thin-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.11-3.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"rubygem-thin-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.11-3.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"rubygem-tilt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-3.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"rubygem-tilt-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-3.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"rubygem-yard","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.2-1.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"rubygems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.16-1.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"sesame","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-6.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"sesame-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-6.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"wallaby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.5-10.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"wallaby-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.5-10.el6"}]}],"bundled":11}],"products":[{"vendor":"redhat","product":"enterprise_mrg"},{"vendor":"trevor_mckay","product":"cumin"}],"references":[{"url":"http://www.securityfocus.com/bid/55618","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2012-1278.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/78775","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2012-1281.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Vendor Advisory"]},{"url":"http://secunia.com/advisories/50660","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=832124","tags":["x_refsource_MISC","x_transferred","Exploit"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-2734","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2012:1278","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2012:1281","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-2734","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=832124","tags":["report"]},{"url":"https://github.com/advisories/GHSA-jvfp-hmwp-7chr"},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/knowledge/docs/en-US/Red_Hat_Enterprise_MRG/2/html/Technical_Notes/sec-Red_Hat_Enterprise_Linux_5.html#RHSA-2012-1278","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=721110","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=748507","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=769573","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=794660","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=799838","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=806071","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=806079","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=807738","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=810519","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=812126","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=827558","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=829421","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=830243","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=830245","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=830248","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=832151","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=846501","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=848212","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=848214","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=848218","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=848222","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=852321","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1278.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-2680","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-2680","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-2680","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-2681","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-2681","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-2681","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-2683","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-2683","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-2683","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-2684","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-2684","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-2684","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-2685","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-2685","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-2685","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-2734","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-2735","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-2735","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-2735","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-3459","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-3459","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-3459","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-3491","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-3491","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-3491","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-3492","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-3492","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-3492","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-3493","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-3493","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-3493","tags":["advisory"]},{"url":"https://access.redhat.com/knowledge/docs/en-US/Red_Hat_Enterprise_MRG/2/html/Technical_Notes/sec-Red_Hat_Enterprise_Linux_6.html#RHSA-2012-1281","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=828434","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1281.json","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2012-2734","description":"Multiple cross-site request forgery (CSRF) vulnerabilities in Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, allow remote attackers to hijack the authentication of arbitrary users for requests that execute commands via unspecified vectors.","status":"published","published":"2012-09-28T17:00:00Z","modified":"2024-08-06T19:42:32.457Z","updated_at":"2026-11-02T14:34:49.937255Z"}],"euvd":[{"id":"EUVD-2012-2714","description":"Multiple cross-site request forgery (CSRF) vulnerabilities in Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, allow remote attackers to hijack the authentication of arbitrary users for requests that execute commands via unspecified vectors.","status":"published","published":"2012-09-28T17:00:00Z","modified":"2024-08-06T19:42:32Z","updated_at":"2026-11-03T01:56:13.373355Z"}],"ghsa":[{"id":"GHSA-jvfp-hmwp-7chr","title":"Multiple cross-site request forgery (CSRF) vulnerabilities in Cumin before 0.1.5444, as used in...","description":"Multiple cross-site request forgery (CSRF) vulnerabilities in Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, allow remote attackers to hijack the authentication of arbitrary users for requests that execute commands via unspecified vectors.","status":"published","published":"2022-05-13T01:08:41Z","modified":"2023-02-10T05:06:08Z","cwes":["CWE-352"],"updated_at":"2026-11-02T14:54:00.716708Z"}],"nvd":[{"id":"CVE-2012-2734","description":"Multiple cross-site request forgery (CSRF) vulnerabilities in Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, allow remote attackers to hijack the authentication of arbitrary users for requests that execute commands via unspecified vectors.","status":"published","published":"2012-09-28T17:55:01.007Z","modified":"2026-06-16T23:42:00.17Z","cvss":[{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-352"],"updated_at":"2026-11-02T14:02:16.115119Z"}],"osv":[{"id":"RHSA-2012:1278","title":"Red Hat Security Advisory: Red Hat Enterprise MRG Grid 2.2 security update","status":"published","published":"2024-09-15T19:57:58Z","modified":"2026-06-28T10:06:43Z","updated_at":"2026-11-02T15:53:01.495018Z"},{"id":"RHSA-2012:1281","title":"Red Hat Security Advisory: Red Hat Enterprise MRG Grid 2.2 security update","status":"published","published":"2024-09-15T19:58:03Z","modified":"2026-06-28T10:06:44Z","updated_at":"2026-11-02T15:53:01.495018Z"}]}}