NVD

Id
44956  
Name
CVE-2012-3359  
Description
Luci in Red Hat Conga stores the user"s username and password in a Base64 encoded string in the __ac session cookie, which allows attackers to gain privileges by accessing this cookie. NOTE: this issue has been SPLIT due to different vulnerability types. Use CVE-2013-7347 for the incorrect enforcement of a user timeout.  
Reject
 
CVSS Version
2  
CVSS Score
3.7  
Severity
Low  
CVSS Base Score
3.7  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
1.9  
CVSS Vector
(AV:L/AC:H/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-03-31  
Modified Date
2014-03-31  
Seq
2012-3359  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
225236 44956 CVE-2012-3359 RHSA-2013:0128  View
225237 44956 CVE-2012-3359 https://bugzilla.redhat.com/show_bug.cgi?id=607179  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
30457 JVNDB-2012-006165 Red Hat Conga の Luci における権限を取得される脆弱性 Red Hat Conga の Luci は、__ac session Cookie の Base64 エンコードされた文字列にユーザのユーザ名とパスワードを格納するため、権限を取得される脆弱性が存在します。 CVE-2012-3359 56597 CVE-2012-3359 44956 3.7 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-006165.html 2012-09-06 2014-04-02 View