Vulnerability Details : CVE-2012-2682
Cumin (aka MRG Management Console), as used in Red Hat Enterprise MRG 2.5, allows attackers with certain database privileges to cause a denial of service (inaccessible page) via a non-ASCII character in the name of a link.
Vulnerability category: Input validationDenial of service
Exploit prediction scoring system (EPSS) score for CVE-2012-2682
Probability of exploitation activity in the next 30 days: 0.29%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 65 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2012-2682
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
---|---|---|---|---|---|
5.0
|
MEDIUM | AV:N/AC:L/Au:N/C:N/I:N/A:P |
10.0
|
2.9
|
NIST |
CWE ids for CVE-2012-2682
-
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.Assigned by: nvd@nist.gov (Primary)
References for CVE-2012-2682
-
https://bugzilla.redhat.com/show_bug.cgi?id=830254
830254 – (CVE-2012-2682) CVE-2012-2682 cumin: DoS via displayed link names containing non-ASCII characters
-
http://rhn.redhat.com/errata/RHSA-2014-0859.html
RHSA-2014:0859 - Security Advisory - Red Hat Customer PortalVendor Advisory
-
http://rhn.redhat.com/errata/RHSA-2014-0858.html
RHSA-2014:0858 - Security Advisory - Red Hat Customer PortalVendor Advisory
Products affected by CVE-2012-2682
- cpe:2.3:o:redhat:enterprise_mrg:2.5:*:*:*:*:*:*:*