NVD

Id
9638  
Name
CVE-2011-2925  
Description
Cumin in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0 records broker authentication credentials in a log file, which allows local users to bypass authentication and perform unauthorized actions on jobs and message queues via a direct connection to the broker.  
Reject
 
CVSS Version
2  
CVSS Score
4.6  
Severity
Medium  
CVSS Base Score
4.6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2011-09-20  
Modified Date
2011-10-04  
Seq
2011-2925  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
55115 9638 CVE-2011-2925 RHSA-2011:1249  View
55116 9638 CVE-2011-2925 RHSA-2011:1250  View
55117 9638 CVE-2011-2925 49500  View
55118 9638 CVE-2011-2925 1026021  View
55119 9638 CVE-2011-2925 cumin-log-files-sec-bypass(69659)  View
55120 9638 CVE-2011-2925 https://bugzilla.redhat.com/show_bug.cgi?id=731574  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
31999 JVNDB-2011-002239 Red Hat Enterprise MRG の Cumin における認証を回避される脆弱性 Red Hat Enterprise Messaging, Realtime, and Grid (MRG) の Cumin は、ブローカーの認証資格情報をログファイルに記録するため、認証を回避され、ジョブやメッセージキューにおいて無許可のアクションを実行される脆弱性が存在します。 CVE-2011-2925 50832 CVE-2011-2925 9638 4.6 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002239.html 2011-09-07 2011-09-26 View