NVD

Id
45053  
Name
CVE-2012-3458  
Description
Beaker before 1.6.4, when using PyCrypto to encrypt sessions, uses AES in ECB cipher mode, which might allow remote attackers to obtain portions of sensitive session data via unspecified vectors.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2012-09-15  
Modified Date
2012-09-17  
Seq
2012-3458  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
225906 45053 CVE-2012-3458 DSA-2541  View
225907 45053 CVE-2012-3458 [oss-security] 20120813 ANN: Beaker 1.6.4 released with important security update  View
225908 45053 CVE-2012-3458 https://bugzilla.redhat.com/show_bug.cgi?id=809267  View
225909 45053 CVE-2012-3458 https://github.com/bbangert/beaker/commit/91becae76101cf87ce8cbfabe3af2622fc328fe5  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
28719 JVNDB-2012-004426 Beaker における重要なセッションデータの一部を取得される脆弱性 Beaker は、セッションを暗号化するために PyCrypto を使用する際、ECB 暗号化モードに AES を利用するため、重要なセッションデータの一部を取得される脆弱性が存在します。 CVE-2012-3458 56696 CVE-2012-3458 45053 4.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-004426.html 2012-09-15 2012-09-19 View