Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2012-1575 (GCVE-0-2012-1575)
Vulnerability from cvelistv5
Published
2012-04-22 18:00
Modified
2024-08-06 19:01
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- n/a
Summary
Multiple cross-site scripting (XSS) vulnerabilities in Cumin before r5238 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) widgets or (2) pages.
References
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-06T19:01:02.666Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "48810",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/48810"
},
{
"name": "53000",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/53000"
},
{
"name": "[cumin-developers] 20120306 r5238 - in trunk: cumin/python/cumin cumin/python/cumin/grid cumin/python/cumin/inventory cumin/python/cumin/messaging rosemary/python/rosemary wooly/python/wooly",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://fedorahosted.org/pipermail/cumin-developers/2012-March/000796.html"
},
{
"name": "RHSA-2012:0476",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2012-0476.html"
},
{
"name": "cumin-redhat-unspec-xss(74844)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/74844"
},
{
"name": "RHSA-2012:0477",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2012-0477.html"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=805712"
},
{
"name": "1026921",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://www.securitytracker.com/id?1026921"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://bugzilla.redhat.com/attachment.cgi?id=571986"
},
{
"name": "48829",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/48829"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2012-03-06T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "Multiple cross-site scripting (XSS) vulnerabilities in Cumin before r5238 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) widgets or (2) pages."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-12-29T15:57:01",
"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"shortName": "redhat"
},
"references": [
{
"name": "48810",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/48810"
},
{
"name": "53000",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/53000"
},
{
"name": "[cumin-developers] 20120306 r5238 - in trunk: cumin/python/cumin cumin/python/cumin/grid cumin/python/cumin/inventory cumin/python/cumin/messaging rosemary/python/rosemary wooly/python/wooly",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://fedorahosted.org/pipermail/cumin-developers/2012-March/000796.html"
},
{
"name": "RHSA-2012:0476",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://rhn.redhat.com/errata/RHSA-2012-0476.html"
},
{
"name": "cumin-redhat-unspec-xss(74844)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/74844"
},
{
"name": "RHSA-2012:0477",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://rhn.redhat.com/errata/RHSA-2012-0477.html"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=805712"
},
{
"name": "1026921",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://www.securitytracker.com/id?1026921"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://bugzilla.redhat.com/attachment.cgi?id=571986"
},
{
"name": "48829",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/48829"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"assignerShortName": "redhat",
"cveId": "CVE-2012-1575",
"datePublished": "2012-04-22T18:00:00",
"dateReserved": "2012-03-12T00:00:00",
"dateUpdated": "2024-08-06T19:01:02.666Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"nvd": "{\"cve\":{\"id\":\"CVE-2012-1575\",\"sourceIdentifier\":\"secalert@redhat.com\",\"published\":\"2012-04-22T18:55:04.560\",\"lastModified\":\"2025-04-11T00:51:21.963\",\"vulnStatus\":\"Deferred\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Multiple cross-site scripting (XSS) vulnerabilities in Cumin before r5238 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) widgets or (2) pages.\"},{\"lang\":\"es\",\"value\":\"M\u00faltiples vulnerabilidades de ejecuci\u00f3n de secuencias de comandos en sitios cruzados (XSS) en Cumin antes de r5238, permite a atacantes remotos inyectar secuencias de comandos web o c\u00f3digo HTML de su elecci\u00f3n a trav\u00e9s de vectores que incluyen (1) widgets o (2) pages.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:M/Au:N/C:N/I:P/A:N\",\"baseScore\":4.3,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"MEDIUM\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"NONE\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":8.6,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-79\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:trevor_mckay:cumin:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"r5237\",\"matchCriteriaId\":\"891815E0-7EDB-4D28-92BB-FAD4D3D7CB83\"}]}]}],\"references\":[{\"url\":\"http://rhn.redhat.com/errata/RHSA-2012-0476.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2012-0477.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://secunia.com/advisories/48810\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://secunia.com/advisories/48829\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.securityfocus.com/bid/53000\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.securitytracker.com/id?1026921\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://bugzilla.redhat.com/attachment.cgi?id=571986\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=805712\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/74844\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://fedorahosted.org/pipermail/cumin-developers/2012-March/000796.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2012-0476.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2012-0477.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/48810\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/48829\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/bid/53000\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securitytracker.com/id?1026921\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://bugzilla.redhat.com/attachment.cgi?id=571986\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=805712\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/74844\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://fedorahosted.org/pipermail/cumin-developers/2012-March/000796.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}"
}
}
rhsa-2012_0476
Vulnerability from csaf_redhat
Published
2012-04-12 16:25
Modified
2024-11-22 05:14
Summary
Red Hat Security Advisory: Red Hat Enterprise MRG Management Console security update
Notes
Topic
An updated MRG Management Console package that fixes several security
issues is now available for Red Hat Enterprise MRG 2 for Red Hat
Enterprise Linux 5.
The Red Hat Security Response Team has rated this update as having moderate
security impact. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available from the CVE link in
the References section.
Details
Red Hat Enterprise MRG (Messaging, Realtime, and Grid) is a next-generation
IT infrastructure for enterprise computing. MRG offers increased
performance, reliability, interoperability, and faster computing for
enterprise customers.
Several cross-site scripting (XSS) flaws were found in the MRG Management
Console (Cumin). An authorized user on the local network could use these
flaws to perform cross-site scripting attacks against MRG Management
Console users. Note: Refer to the MRG Messaging User Guide for information
on configuring authentication and authorization in the MRG Messaging
broker. (CVE-2012-1575)
Users of Red Hat Enterprise MRG Management Console are advised to upgrade
to this updated package, which corrects these issues. The MRG Management
Console must be restarted ("service cumin restart") for this update to take
effect.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An updated MRG Management Console package that fixes several security\nissues is now available for Red Hat Enterprise MRG 2 for Red Hat\nEnterprise Linux 5.\n\nThe Red Hat Security Response Team has rated this update as having moderate\nsecurity impact. A Common Vulnerability Scoring System (CVSS) base score,\nwhich gives a detailed severity rating, is available from the CVE link in\nthe References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat Enterprise MRG (Messaging, Realtime, and Grid) is a next-generation\nIT infrastructure for enterprise computing. MRG offers increased\nperformance, reliability, interoperability, and faster computing for\nenterprise customers.\n\nSeveral cross-site scripting (XSS) flaws were found in the MRG Management\nConsole (Cumin). An authorized user on the local network could use these\nflaws to perform cross-site scripting attacks against MRG Management\nConsole users. Note: Refer to the MRG Messaging User Guide for information\non configuring authentication and authorization in the MRG Messaging\nbroker. (CVE-2012-1575)\n\nUsers of Red Hat Enterprise MRG Management Console are advised to upgrade\nto this updated package, which corrects these issues. The MRG Management\nConsole must be restarted (\"service cumin restart\") for this update to take\neffect.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2012:0476",
"url": "https://access.redhat.com/errata/RHSA-2012:0476"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "https://docs.redhat.com/docs/en-US/index.html",
"url": "https://docs.redhat.com/docs/en-US/index.html"
},
{
"category": "external",
"summary": "805712",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=805712"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0476.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Enterprise MRG Management Console security update",
"tracking": {
"current_release_date": "2024-11-22T05:14:37+00:00",
"generator": {
"date": "2024-11-22T05:14:37+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2012:0476",
"initial_release_date": "2012-04-12T16:25:00+00:00",
"revision_history": [
{
"date": "2012-04-12T16:25:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2012-04-12T16:35:25+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-22T05:14:37+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "MRG Grid for RHEL 5 Server v.2",
"product": {
"name": "MRG Grid for RHEL 5 Server v.2",
"product_id": "5Server-MRG-Grid-2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_mrg:2::el5"
}
}
},
{
"category": "product_name",
"name": "MRG Management for RHEL 5 Server v.2",
"product": {
"name": "MRG Management for RHEL 5 Server v.2",
"product_id": "5Server-MRG-Management-2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_mrg:2::el5"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise MRG for RHEL-5"
},
{
"branches": [
{
"category": "product_version",
"name": "cumin-0:0.1.5192-4.el5.noarch",
"product": {
"name": "cumin-0:0.1.5192-4.el5.noarch",
"product_id": "cumin-0:0.1.5192-4.el5.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cumin@0.1.5192-4.el5?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "cumin-0:0.1.5192-4.el5.src",
"product": {
"name": "cumin-0:0.1.5192-4.el5.src",
"product_id": "cumin-0:0.1.5192-4.el5.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cumin@0.1.5192-4.el5?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "cumin-0:0.1.5192-4.el5.noarch as a component of MRG Grid for RHEL 5 Server v.2",
"product_id": "5Server-MRG-Grid-2:cumin-0:0.1.5192-4.el5.noarch"
},
"product_reference": "cumin-0:0.1.5192-4.el5.noarch",
"relates_to_product_reference": "5Server-MRG-Grid-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cumin-0:0.1.5192-4.el5.src as a component of MRG Grid for RHEL 5 Server v.2",
"product_id": "5Server-MRG-Grid-2:cumin-0:0.1.5192-4.el5.src"
},
"product_reference": "cumin-0:0.1.5192-4.el5.src",
"relates_to_product_reference": "5Server-MRG-Grid-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cumin-0:0.1.5192-4.el5.noarch as a component of MRG Management for RHEL 5 Server v.2",
"product_id": "5Server-MRG-Management-2:cumin-0:0.1.5192-4.el5.noarch"
},
"product_reference": "cumin-0:0.1.5192-4.el5.noarch",
"relates_to_product_reference": "5Server-MRG-Management-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cumin-0:0.1.5192-4.el5.src as a component of MRG Management for RHEL 5 Server v.2",
"product_id": "5Server-MRG-Management-2:cumin-0:0.1.5192-4.el5.src"
},
"product_reference": "cumin-0:0.1.5192-4.el5.src",
"relates_to_product_reference": "5Server-MRG-Management-2"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2012-1575",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2012-03-16T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "805712"
}
],
"notes": [
{
"category": "description",
"text": "Multiple cross-site scripting (XSS) vulnerabilities in Cumin before r5238 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) widgets or (2) pages.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "cumin: multiple XSS flaws",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Server-MRG-Grid-2:cumin-0:0.1.5192-4.el5.noarch",
"5Server-MRG-Grid-2:cumin-0:0.1.5192-4.el5.src",
"5Server-MRG-Management-2:cumin-0:0.1.5192-4.el5.noarch",
"5Server-MRG-Management-2:cumin-0:0.1.5192-4.el5.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2012-1575"
},
{
"category": "external",
"summary": "RHBZ#805712",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=805712"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2012-1575",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-1575"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-1575",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2012-1575"
}
],
"release_date": "2012-03-06T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2012-04-12T16:25:00+00:00",
"details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
"product_ids": [
"5Server-MRG-Grid-2:cumin-0:0.1.5192-4.el5.noarch",
"5Server-MRG-Grid-2:cumin-0:0.1.5192-4.el5.src",
"5Server-MRG-Management-2:cumin-0:0.1.5192-4.el5.noarch",
"5Server-MRG-Management-2:cumin-0:0.1.5192-4.el5.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2012:0476"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"5Server-MRG-Grid-2:cumin-0:0.1.5192-4.el5.noarch",
"5Server-MRG-Grid-2:cumin-0:0.1.5192-4.el5.src",
"5Server-MRG-Management-2:cumin-0:0.1.5192-4.el5.noarch",
"5Server-MRG-Management-2:cumin-0:0.1.5192-4.el5.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "cumin: multiple XSS flaws"
}
]
}
rhsa-2012:0477
Vulnerability from csaf_redhat
Published
2012-04-12 16:26
Modified
2025-09-25 11:45
Summary
Red Hat Security Advisory: Red Hat Enterprise MRG Management Console security update
Notes
Topic
An updated MRG Management Console package that fixes several security
issues is now available for Red Hat Enterprise MRG 2 for Red Hat
Enterprise Linux 6.
The Red Hat Security Response Team has rated this update as having moderate
security impact. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available from the CVE link in
the References section.
Details
Red Hat Enterprise MRG (Messaging, Realtime, and Grid) is a next-generation
IT infrastructure for enterprise computing. MRG offers increased
performance, reliability, interoperability, and faster computing for
enterprise customers.
Several cross-site scripting (XSS) flaws were found in the MRG Management
Console (Cumin). An authorized user on the local network could use these
flaws to perform cross-site scripting attacks against MRG Management
Console users. Note: Refer to the MRG Messaging User Guide for information
on configuring authentication and authorization in the MRG Messaging
broker. (CVE-2012-1575)
Users of Red Hat Enterprise MRG Management Console are advised to upgrade
to this updated package, which corrects these issues. The MRG Management
Console must be restarted ("service cumin restart") for this update to take
effect.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An updated MRG Management Console package that fixes several security\nissues is now available for Red Hat Enterprise MRG 2 for Red Hat\nEnterprise Linux 6.\n\nThe Red Hat Security Response Team has rated this update as having moderate\nsecurity impact. A Common Vulnerability Scoring System (CVSS) base score,\nwhich gives a detailed severity rating, is available from the CVE link in\nthe References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat Enterprise MRG (Messaging, Realtime, and Grid) is a next-generation\nIT infrastructure for enterprise computing. MRG offers increased\nperformance, reliability, interoperability, and faster computing for\nenterprise customers.\n\nSeveral cross-site scripting (XSS) flaws were found in the MRG Management\nConsole (Cumin). An authorized user on the local network could use these\nflaws to perform cross-site scripting attacks against MRG Management\nConsole users. Note: Refer to the MRG Messaging User Guide for information\non configuring authentication and authorization in the MRG Messaging\nbroker. (CVE-2012-1575)\n\nUsers of Red Hat Enterprise MRG Management Console are advised to upgrade\nto this updated package, which corrects these issues. The MRG Management\nConsole must be restarted (\"service cumin restart\") for this update to take\neffect.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2012:0477",
"url": "https://access.redhat.com/errata/RHSA-2012:0477"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "https://docs.redhat.com/docs/en-US/index.html",
"url": "https://docs.redhat.com/docs/en-US/index.html"
},
{
"category": "external",
"summary": "805712",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=805712"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0477.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Enterprise MRG Management Console security update",
"tracking": {
"current_release_date": "2025-09-25T11:45:03+00:00",
"generator": {
"date": "2025-09-25T11:45:03+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.8"
}
},
"id": "RHSA-2012:0477",
"initial_release_date": "2012-04-12T16:26:00+00:00",
"revision_history": [
{
"date": "2012-04-12T16:26:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2012-04-12T16:35:19+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-09-25T11:45:03+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat MRG Grid for RHEL 6 Server v.2",
"product": {
"name": "Red Hat MRG Grid for RHEL 6 Server v.2",
"product_id": "6Server-MRG-Grid-2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_mrg:2:server:el6"
}
}
},
{
"category": "product_name",
"name": "Red Hat MRG Management for RHEL 6 Server v.2",
"product": {
"name": "Red Hat MRG Management for RHEL 6 Server v.2",
"product_id": "6Server-MRG-Management-2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_mrg:2:server:el6"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise MRG for RHEL-6"
},
{
"branches": [
{
"category": "product_version",
"name": "cumin-0:0.1.5192-5.el6.noarch",
"product": {
"name": "cumin-0:0.1.5192-5.el6.noarch",
"product_id": "cumin-0:0.1.5192-5.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cumin@0.1.5192-5.el6?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "cumin-0:0.1.5192-5.el6.src",
"product": {
"name": "cumin-0:0.1.5192-5.el6.src",
"product_id": "cumin-0:0.1.5192-5.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cumin@0.1.5192-5.el6?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "cumin-0:0.1.5192-5.el6.noarch as a component of Red Hat MRG Grid for RHEL 6 Server v.2",
"product_id": "6Server-MRG-Grid-2:cumin-0:0.1.5192-5.el6.noarch"
},
"product_reference": "cumin-0:0.1.5192-5.el6.noarch",
"relates_to_product_reference": "6Server-MRG-Grid-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cumin-0:0.1.5192-5.el6.src as a component of Red Hat MRG Grid for RHEL 6 Server v.2",
"product_id": "6Server-MRG-Grid-2:cumin-0:0.1.5192-5.el6.src"
},
"product_reference": "cumin-0:0.1.5192-5.el6.src",
"relates_to_product_reference": "6Server-MRG-Grid-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cumin-0:0.1.5192-5.el6.noarch as a component of Red Hat MRG Management for RHEL 6 Server v.2",
"product_id": "6Server-MRG-Management-2:cumin-0:0.1.5192-5.el6.noarch"
},
"product_reference": "cumin-0:0.1.5192-5.el6.noarch",
"relates_to_product_reference": "6Server-MRG-Management-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cumin-0:0.1.5192-5.el6.src as a component of Red Hat MRG Management for RHEL 6 Server v.2",
"product_id": "6Server-MRG-Management-2:cumin-0:0.1.5192-5.el6.src"
},
"product_reference": "cumin-0:0.1.5192-5.el6.src",
"relates_to_product_reference": "6Server-MRG-Management-2"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2012-1575",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2012-03-16T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "805712"
}
],
"notes": [
{
"category": "description",
"text": "Multiple cross-site scripting (XSS) vulnerabilities in Cumin before r5238 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) widgets or (2) pages.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "cumin: multiple XSS flaws",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-MRG-Grid-2:cumin-0:0.1.5192-5.el6.noarch",
"6Server-MRG-Grid-2:cumin-0:0.1.5192-5.el6.src",
"6Server-MRG-Management-2:cumin-0:0.1.5192-5.el6.noarch",
"6Server-MRG-Management-2:cumin-0:0.1.5192-5.el6.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2012-1575"
},
{
"category": "external",
"summary": "RHBZ#805712",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=805712"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2012-1575",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-1575"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-1575",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2012-1575"
}
],
"release_date": "2012-03-06T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2012-04-12T16:26:00+00:00",
"details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
"product_ids": [
"6Server-MRG-Grid-2:cumin-0:0.1.5192-5.el6.noarch",
"6Server-MRG-Grid-2:cumin-0:0.1.5192-5.el6.src",
"6Server-MRG-Management-2:cumin-0:0.1.5192-5.el6.noarch",
"6Server-MRG-Management-2:cumin-0:0.1.5192-5.el6.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2012:0477"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"6Server-MRG-Grid-2:cumin-0:0.1.5192-5.el6.noarch",
"6Server-MRG-Grid-2:cumin-0:0.1.5192-5.el6.src",
"6Server-MRG-Management-2:cumin-0:0.1.5192-5.el6.noarch",
"6Server-MRG-Management-2:cumin-0:0.1.5192-5.el6.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "cumin: multiple XSS flaws"
}
]
}
RHSA-2012:0476
Vulnerability from csaf_redhat
Published
2012-04-12 16:25
Modified
2025-09-25 11:44
Summary
Red Hat Security Advisory: Red Hat Enterprise MRG Management Console security update
Notes
Topic
An updated MRG Management Console package that fixes several security
issues is now available for Red Hat Enterprise MRG 2 for Red Hat
Enterprise Linux 5.
The Red Hat Security Response Team has rated this update as having moderate
security impact. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available from the CVE link in
the References section.
Details
Red Hat Enterprise MRG (Messaging, Realtime, and Grid) is a next-generation
IT infrastructure for enterprise computing. MRG offers increased
performance, reliability, interoperability, and faster computing for
enterprise customers.
Several cross-site scripting (XSS) flaws were found in the MRG Management
Console (Cumin). An authorized user on the local network could use these
flaws to perform cross-site scripting attacks against MRG Management
Console users. Note: Refer to the MRG Messaging User Guide for information
on configuring authentication and authorization in the MRG Messaging
broker. (CVE-2012-1575)
Users of Red Hat Enterprise MRG Management Console are advised to upgrade
to this updated package, which corrects these issues. The MRG Management
Console must be restarted ("service cumin restart") for this update to take
effect.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An updated MRG Management Console package that fixes several security\nissues is now available for Red Hat Enterprise MRG 2 for Red Hat\nEnterprise Linux 5.\n\nThe Red Hat Security Response Team has rated this update as having moderate\nsecurity impact. A Common Vulnerability Scoring System (CVSS) base score,\nwhich gives a detailed severity rating, is available from the CVE link in\nthe References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat Enterprise MRG (Messaging, Realtime, and Grid) is a next-generation\nIT infrastructure for enterprise computing. MRG offers increased\nperformance, reliability, interoperability, and faster computing for\nenterprise customers.\n\nSeveral cross-site scripting (XSS) flaws were found in the MRG Management\nConsole (Cumin). An authorized user on the local network could use these\nflaws to perform cross-site scripting attacks against MRG Management\nConsole users. Note: Refer to the MRG Messaging User Guide for information\non configuring authentication and authorization in the MRG Messaging\nbroker. (CVE-2012-1575)\n\nUsers of Red Hat Enterprise MRG Management Console are advised to upgrade\nto this updated package, which corrects these issues. The MRG Management\nConsole must be restarted (\"service cumin restart\") for this update to take\neffect.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2012:0476",
"url": "https://access.redhat.com/errata/RHSA-2012:0476"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "https://docs.redhat.com/docs/en-US/index.html",
"url": "https://docs.redhat.com/docs/en-US/index.html"
},
{
"category": "external",
"summary": "805712",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=805712"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0476.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Enterprise MRG Management Console security update",
"tracking": {
"current_release_date": "2025-09-25T11:44:59+00:00",
"generator": {
"date": "2025-09-25T11:44:59+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.8"
}
},
"id": "RHSA-2012:0476",
"initial_release_date": "2012-04-12T16:25:00+00:00",
"revision_history": [
{
"date": "2012-04-12T16:25:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2012-04-12T16:35:25+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-09-25T11:44:59+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "MRG Grid for RHEL 5 Server v.2",
"product": {
"name": "MRG Grid for RHEL 5 Server v.2",
"product_id": "5Server-MRG-Grid-2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_mrg:2::el5"
}
}
},
{
"category": "product_name",
"name": "MRG Management for RHEL 5 Server v.2",
"product": {
"name": "MRG Management for RHEL 5 Server v.2",
"product_id": "5Server-MRG-Management-2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_mrg:2::el5"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise MRG for RHEL-5"
},
{
"branches": [
{
"category": "product_version",
"name": "cumin-0:0.1.5192-4.el5.noarch",
"product": {
"name": "cumin-0:0.1.5192-4.el5.noarch",
"product_id": "cumin-0:0.1.5192-4.el5.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cumin@0.1.5192-4.el5?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "cumin-0:0.1.5192-4.el5.src",
"product": {
"name": "cumin-0:0.1.5192-4.el5.src",
"product_id": "cumin-0:0.1.5192-4.el5.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cumin@0.1.5192-4.el5?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "cumin-0:0.1.5192-4.el5.noarch as a component of MRG Grid for RHEL 5 Server v.2",
"product_id": "5Server-MRG-Grid-2:cumin-0:0.1.5192-4.el5.noarch"
},
"product_reference": "cumin-0:0.1.5192-4.el5.noarch",
"relates_to_product_reference": "5Server-MRG-Grid-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cumin-0:0.1.5192-4.el5.src as a component of MRG Grid for RHEL 5 Server v.2",
"product_id": "5Server-MRG-Grid-2:cumin-0:0.1.5192-4.el5.src"
},
"product_reference": "cumin-0:0.1.5192-4.el5.src",
"relates_to_product_reference": "5Server-MRG-Grid-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cumin-0:0.1.5192-4.el5.noarch as a component of MRG Management for RHEL 5 Server v.2",
"product_id": "5Server-MRG-Management-2:cumin-0:0.1.5192-4.el5.noarch"
},
"product_reference": "cumin-0:0.1.5192-4.el5.noarch",
"relates_to_product_reference": "5Server-MRG-Management-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cumin-0:0.1.5192-4.el5.src as a component of MRG Management for RHEL 5 Server v.2",
"product_id": "5Server-MRG-Management-2:cumin-0:0.1.5192-4.el5.src"
},
"product_reference": "cumin-0:0.1.5192-4.el5.src",
"relates_to_product_reference": "5Server-MRG-Management-2"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2012-1575",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2012-03-16T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "805712"
}
],
"notes": [
{
"category": "description",
"text": "Multiple cross-site scripting (XSS) vulnerabilities in Cumin before r5238 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) widgets or (2) pages.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "cumin: multiple XSS flaws",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Server-MRG-Grid-2:cumin-0:0.1.5192-4.el5.noarch",
"5Server-MRG-Grid-2:cumin-0:0.1.5192-4.el5.src",
"5Server-MRG-Management-2:cumin-0:0.1.5192-4.el5.noarch",
"5Server-MRG-Management-2:cumin-0:0.1.5192-4.el5.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2012-1575"
},
{
"category": "external",
"summary": "RHBZ#805712",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=805712"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2012-1575",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-1575"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-1575",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2012-1575"
}
],
"release_date": "2012-03-06T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2012-04-12T16:25:00+00:00",
"details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
"product_ids": [
"5Server-MRG-Grid-2:cumin-0:0.1.5192-4.el5.noarch",
"5Server-MRG-Grid-2:cumin-0:0.1.5192-4.el5.src",
"5Server-MRG-Management-2:cumin-0:0.1.5192-4.el5.noarch",
"5Server-MRG-Management-2:cumin-0:0.1.5192-4.el5.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2012:0476"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"5Server-MRG-Grid-2:cumin-0:0.1.5192-4.el5.noarch",
"5Server-MRG-Grid-2:cumin-0:0.1.5192-4.el5.src",
"5Server-MRG-Management-2:cumin-0:0.1.5192-4.el5.noarch",
"5Server-MRG-Management-2:cumin-0:0.1.5192-4.el5.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "cumin: multiple XSS flaws"
}
]
}
rhsa-2012_0477
Vulnerability from csaf_redhat
Published
2012-04-12 16:26
Modified
2024-11-22 05:14
Summary
Red Hat Security Advisory: Red Hat Enterprise MRG Management Console security update
Notes
Topic
An updated MRG Management Console package that fixes several security
issues is now available for Red Hat Enterprise MRG 2 for Red Hat
Enterprise Linux 6.
The Red Hat Security Response Team has rated this update as having moderate
security impact. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available from the CVE link in
the References section.
Details
Red Hat Enterprise MRG (Messaging, Realtime, and Grid) is a next-generation
IT infrastructure for enterprise computing. MRG offers increased
performance, reliability, interoperability, and faster computing for
enterprise customers.
Several cross-site scripting (XSS) flaws were found in the MRG Management
Console (Cumin). An authorized user on the local network could use these
flaws to perform cross-site scripting attacks against MRG Management
Console users. Note: Refer to the MRG Messaging User Guide for information
on configuring authentication and authorization in the MRG Messaging
broker. (CVE-2012-1575)
Users of Red Hat Enterprise MRG Management Console are advised to upgrade
to this updated package, which corrects these issues. The MRG Management
Console must be restarted ("service cumin restart") for this update to take
effect.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An updated MRG Management Console package that fixes several security\nissues is now available for Red Hat Enterprise MRG 2 for Red Hat\nEnterprise Linux 6.\n\nThe Red Hat Security Response Team has rated this update as having moderate\nsecurity impact. A Common Vulnerability Scoring System (CVSS) base score,\nwhich gives a detailed severity rating, is available from the CVE link in\nthe References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat Enterprise MRG (Messaging, Realtime, and Grid) is a next-generation\nIT infrastructure for enterprise computing. MRG offers increased\nperformance, reliability, interoperability, and faster computing for\nenterprise customers.\n\nSeveral cross-site scripting (XSS) flaws were found in the MRG Management\nConsole (Cumin). An authorized user on the local network could use these\nflaws to perform cross-site scripting attacks against MRG Management\nConsole users. Note: Refer to the MRG Messaging User Guide for information\non configuring authentication and authorization in the MRG Messaging\nbroker. (CVE-2012-1575)\n\nUsers of Red Hat Enterprise MRG Management Console are advised to upgrade\nto this updated package, which corrects these issues. The MRG Management\nConsole must be restarted (\"service cumin restart\") for this update to take\neffect.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2012:0477",
"url": "https://access.redhat.com/errata/RHSA-2012:0477"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "https://docs.redhat.com/docs/en-US/index.html",
"url": "https://docs.redhat.com/docs/en-US/index.html"
},
{
"category": "external",
"summary": "805712",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=805712"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0477.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Enterprise MRG Management Console security update",
"tracking": {
"current_release_date": "2024-11-22T05:14:41+00:00",
"generator": {
"date": "2024-11-22T05:14:41+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2012:0477",
"initial_release_date": "2012-04-12T16:26:00+00:00",
"revision_history": [
{
"date": "2012-04-12T16:26:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2012-04-12T16:35:19+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-22T05:14:41+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat MRG Grid for RHEL 6 Server v.2",
"product": {
"name": "Red Hat MRG Grid for RHEL 6 Server v.2",
"product_id": "6Server-MRG-Grid-2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_mrg:2:server:el6"
}
}
},
{
"category": "product_name",
"name": "Red Hat MRG Management for RHEL 6 Server v.2",
"product": {
"name": "Red Hat MRG Management for RHEL 6 Server v.2",
"product_id": "6Server-MRG-Management-2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_mrg:2:server:el6"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise MRG for RHEL-6"
},
{
"branches": [
{
"category": "product_version",
"name": "cumin-0:0.1.5192-5.el6.noarch",
"product": {
"name": "cumin-0:0.1.5192-5.el6.noarch",
"product_id": "cumin-0:0.1.5192-5.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cumin@0.1.5192-5.el6?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "cumin-0:0.1.5192-5.el6.src",
"product": {
"name": "cumin-0:0.1.5192-5.el6.src",
"product_id": "cumin-0:0.1.5192-5.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cumin@0.1.5192-5.el6?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "cumin-0:0.1.5192-5.el6.noarch as a component of Red Hat MRG Grid for RHEL 6 Server v.2",
"product_id": "6Server-MRG-Grid-2:cumin-0:0.1.5192-5.el6.noarch"
},
"product_reference": "cumin-0:0.1.5192-5.el6.noarch",
"relates_to_product_reference": "6Server-MRG-Grid-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cumin-0:0.1.5192-5.el6.src as a component of Red Hat MRG Grid for RHEL 6 Server v.2",
"product_id": "6Server-MRG-Grid-2:cumin-0:0.1.5192-5.el6.src"
},
"product_reference": "cumin-0:0.1.5192-5.el6.src",
"relates_to_product_reference": "6Server-MRG-Grid-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cumin-0:0.1.5192-5.el6.noarch as a component of Red Hat MRG Management for RHEL 6 Server v.2",
"product_id": "6Server-MRG-Management-2:cumin-0:0.1.5192-5.el6.noarch"
},
"product_reference": "cumin-0:0.1.5192-5.el6.noarch",
"relates_to_product_reference": "6Server-MRG-Management-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cumin-0:0.1.5192-5.el6.src as a component of Red Hat MRG Management for RHEL 6 Server v.2",
"product_id": "6Server-MRG-Management-2:cumin-0:0.1.5192-5.el6.src"
},
"product_reference": "cumin-0:0.1.5192-5.el6.src",
"relates_to_product_reference": "6Server-MRG-Management-2"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2012-1575",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2012-03-16T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "805712"
}
],
"notes": [
{
"category": "description",
"text": "Multiple cross-site scripting (XSS) vulnerabilities in Cumin before r5238 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) widgets or (2) pages.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "cumin: multiple XSS flaws",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-MRG-Grid-2:cumin-0:0.1.5192-5.el6.noarch",
"6Server-MRG-Grid-2:cumin-0:0.1.5192-5.el6.src",
"6Server-MRG-Management-2:cumin-0:0.1.5192-5.el6.noarch",
"6Server-MRG-Management-2:cumin-0:0.1.5192-5.el6.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2012-1575"
},
{
"category": "external",
"summary": "RHBZ#805712",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=805712"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2012-1575",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-1575"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-1575",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2012-1575"
}
],
"release_date": "2012-03-06T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2012-04-12T16:26:00+00:00",
"details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
"product_ids": [
"6Server-MRG-Grid-2:cumin-0:0.1.5192-5.el6.noarch",
"6Server-MRG-Grid-2:cumin-0:0.1.5192-5.el6.src",
"6Server-MRG-Management-2:cumin-0:0.1.5192-5.el6.noarch",
"6Server-MRG-Management-2:cumin-0:0.1.5192-5.el6.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2012:0477"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"6Server-MRG-Grid-2:cumin-0:0.1.5192-5.el6.noarch",
"6Server-MRG-Grid-2:cumin-0:0.1.5192-5.el6.src",
"6Server-MRG-Management-2:cumin-0:0.1.5192-5.el6.noarch",
"6Server-MRG-Management-2:cumin-0:0.1.5192-5.el6.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "cumin: multiple XSS flaws"
}
]
}
rhsa-2012:0476
Vulnerability from csaf_redhat
Published
2012-04-12 16:25
Modified
2025-09-25 11:44
Summary
Red Hat Security Advisory: Red Hat Enterprise MRG Management Console security update
Notes
Topic
An updated MRG Management Console package that fixes several security
issues is now available for Red Hat Enterprise MRG 2 for Red Hat
Enterprise Linux 5.
The Red Hat Security Response Team has rated this update as having moderate
security impact. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available from the CVE link in
the References section.
Details
Red Hat Enterprise MRG (Messaging, Realtime, and Grid) is a next-generation
IT infrastructure for enterprise computing. MRG offers increased
performance, reliability, interoperability, and faster computing for
enterprise customers.
Several cross-site scripting (XSS) flaws were found in the MRG Management
Console (Cumin). An authorized user on the local network could use these
flaws to perform cross-site scripting attacks against MRG Management
Console users. Note: Refer to the MRG Messaging User Guide for information
on configuring authentication and authorization in the MRG Messaging
broker. (CVE-2012-1575)
Users of Red Hat Enterprise MRG Management Console are advised to upgrade
to this updated package, which corrects these issues. The MRG Management
Console must be restarted ("service cumin restart") for this update to take
effect.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An updated MRG Management Console package that fixes several security\nissues is now available for Red Hat Enterprise MRG 2 for Red Hat\nEnterprise Linux 5.\n\nThe Red Hat Security Response Team has rated this update as having moderate\nsecurity impact. A Common Vulnerability Scoring System (CVSS) base score,\nwhich gives a detailed severity rating, is available from the CVE link in\nthe References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat Enterprise MRG (Messaging, Realtime, and Grid) is a next-generation\nIT infrastructure for enterprise computing. MRG offers increased\nperformance, reliability, interoperability, and faster computing for\nenterprise customers.\n\nSeveral cross-site scripting (XSS) flaws were found in the MRG Management\nConsole (Cumin). An authorized user on the local network could use these\nflaws to perform cross-site scripting attacks against MRG Management\nConsole users. Note: Refer to the MRG Messaging User Guide for information\non configuring authentication and authorization in the MRG Messaging\nbroker. (CVE-2012-1575)\n\nUsers of Red Hat Enterprise MRG Management Console are advised to upgrade\nto this updated package, which corrects these issues. The MRG Management\nConsole must be restarted (\"service cumin restart\") for this update to take\neffect.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2012:0476",
"url": "https://access.redhat.com/errata/RHSA-2012:0476"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "https://docs.redhat.com/docs/en-US/index.html",
"url": "https://docs.redhat.com/docs/en-US/index.html"
},
{
"category": "external",
"summary": "805712",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=805712"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0476.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Enterprise MRG Management Console security update",
"tracking": {
"current_release_date": "2025-09-25T11:44:59+00:00",
"generator": {
"date": "2025-09-25T11:44:59+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.8"
}
},
"id": "RHSA-2012:0476",
"initial_release_date": "2012-04-12T16:25:00+00:00",
"revision_history": [
{
"date": "2012-04-12T16:25:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2012-04-12T16:35:25+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-09-25T11:44:59+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "MRG Grid for RHEL 5 Server v.2",
"product": {
"name": "MRG Grid for RHEL 5 Server v.2",
"product_id": "5Server-MRG-Grid-2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_mrg:2::el5"
}
}
},
{
"category": "product_name",
"name": "MRG Management for RHEL 5 Server v.2",
"product": {
"name": "MRG Management for RHEL 5 Server v.2",
"product_id": "5Server-MRG-Management-2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_mrg:2::el5"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise MRG for RHEL-5"
},
{
"branches": [
{
"category": "product_version",
"name": "cumin-0:0.1.5192-4.el5.noarch",
"product": {
"name": "cumin-0:0.1.5192-4.el5.noarch",
"product_id": "cumin-0:0.1.5192-4.el5.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cumin@0.1.5192-4.el5?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "cumin-0:0.1.5192-4.el5.src",
"product": {
"name": "cumin-0:0.1.5192-4.el5.src",
"product_id": "cumin-0:0.1.5192-4.el5.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cumin@0.1.5192-4.el5?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "cumin-0:0.1.5192-4.el5.noarch as a component of MRG Grid for RHEL 5 Server v.2",
"product_id": "5Server-MRG-Grid-2:cumin-0:0.1.5192-4.el5.noarch"
},
"product_reference": "cumin-0:0.1.5192-4.el5.noarch",
"relates_to_product_reference": "5Server-MRG-Grid-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cumin-0:0.1.5192-4.el5.src as a component of MRG Grid for RHEL 5 Server v.2",
"product_id": "5Server-MRG-Grid-2:cumin-0:0.1.5192-4.el5.src"
},
"product_reference": "cumin-0:0.1.5192-4.el5.src",
"relates_to_product_reference": "5Server-MRG-Grid-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cumin-0:0.1.5192-4.el5.noarch as a component of MRG Management for RHEL 5 Server v.2",
"product_id": "5Server-MRG-Management-2:cumin-0:0.1.5192-4.el5.noarch"
},
"product_reference": "cumin-0:0.1.5192-4.el5.noarch",
"relates_to_product_reference": "5Server-MRG-Management-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cumin-0:0.1.5192-4.el5.src as a component of MRG Management for RHEL 5 Server v.2",
"product_id": "5Server-MRG-Management-2:cumin-0:0.1.5192-4.el5.src"
},
"product_reference": "cumin-0:0.1.5192-4.el5.src",
"relates_to_product_reference": "5Server-MRG-Management-2"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2012-1575",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2012-03-16T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "805712"
}
],
"notes": [
{
"category": "description",
"text": "Multiple cross-site scripting (XSS) vulnerabilities in Cumin before r5238 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) widgets or (2) pages.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "cumin: multiple XSS flaws",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Server-MRG-Grid-2:cumin-0:0.1.5192-4.el5.noarch",
"5Server-MRG-Grid-2:cumin-0:0.1.5192-4.el5.src",
"5Server-MRG-Management-2:cumin-0:0.1.5192-4.el5.noarch",
"5Server-MRG-Management-2:cumin-0:0.1.5192-4.el5.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2012-1575"
},
{
"category": "external",
"summary": "RHBZ#805712",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=805712"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2012-1575",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-1575"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-1575",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2012-1575"
}
],
"release_date": "2012-03-06T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2012-04-12T16:25:00+00:00",
"details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
"product_ids": [
"5Server-MRG-Grid-2:cumin-0:0.1.5192-4.el5.noarch",
"5Server-MRG-Grid-2:cumin-0:0.1.5192-4.el5.src",
"5Server-MRG-Management-2:cumin-0:0.1.5192-4.el5.noarch",
"5Server-MRG-Management-2:cumin-0:0.1.5192-4.el5.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2012:0476"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"5Server-MRG-Grid-2:cumin-0:0.1.5192-4.el5.noarch",
"5Server-MRG-Grid-2:cumin-0:0.1.5192-4.el5.src",
"5Server-MRG-Management-2:cumin-0:0.1.5192-4.el5.noarch",
"5Server-MRG-Management-2:cumin-0:0.1.5192-4.el5.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "cumin: multiple XSS flaws"
}
]
}
RHSA-2012:0477
Vulnerability from csaf_redhat
Published
2012-04-12 16:26
Modified
2025-09-25 11:45
Summary
Red Hat Security Advisory: Red Hat Enterprise MRG Management Console security update
Notes
Topic
An updated MRG Management Console package that fixes several security
issues is now available for Red Hat Enterprise MRG 2 for Red Hat
Enterprise Linux 6.
The Red Hat Security Response Team has rated this update as having moderate
security impact. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available from the CVE link in
the References section.
Details
Red Hat Enterprise MRG (Messaging, Realtime, and Grid) is a next-generation
IT infrastructure for enterprise computing. MRG offers increased
performance, reliability, interoperability, and faster computing for
enterprise customers.
Several cross-site scripting (XSS) flaws were found in the MRG Management
Console (Cumin). An authorized user on the local network could use these
flaws to perform cross-site scripting attacks against MRG Management
Console users. Note: Refer to the MRG Messaging User Guide for information
on configuring authentication and authorization in the MRG Messaging
broker. (CVE-2012-1575)
Users of Red Hat Enterprise MRG Management Console are advised to upgrade
to this updated package, which corrects these issues. The MRG Management
Console must be restarted ("service cumin restart") for this update to take
effect.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An updated MRG Management Console package that fixes several security\nissues is now available for Red Hat Enterprise MRG 2 for Red Hat\nEnterprise Linux 6.\n\nThe Red Hat Security Response Team has rated this update as having moderate\nsecurity impact. A Common Vulnerability Scoring System (CVSS) base score,\nwhich gives a detailed severity rating, is available from the CVE link in\nthe References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat Enterprise MRG (Messaging, Realtime, and Grid) is a next-generation\nIT infrastructure for enterprise computing. MRG offers increased\nperformance, reliability, interoperability, and faster computing for\nenterprise customers.\n\nSeveral cross-site scripting (XSS) flaws were found in the MRG Management\nConsole (Cumin). An authorized user on the local network could use these\nflaws to perform cross-site scripting attacks against MRG Management\nConsole users. Note: Refer to the MRG Messaging User Guide for information\non configuring authentication and authorization in the MRG Messaging\nbroker. (CVE-2012-1575)\n\nUsers of Red Hat Enterprise MRG Management Console are advised to upgrade\nto this updated package, which corrects these issues. The MRG Management\nConsole must be restarted (\"service cumin restart\") for this update to take\neffect.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2012:0477",
"url": "https://access.redhat.com/errata/RHSA-2012:0477"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "https://docs.redhat.com/docs/en-US/index.html",
"url": "https://docs.redhat.com/docs/en-US/index.html"
},
{
"category": "external",
"summary": "805712",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=805712"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0477.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Enterprise MRG Management Console security update",
"tracking": {
"current_release_date": "2025-09-25T11:45:03+00:00",
"generator": {
"date": "2025-09-25T11:45:03+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.8"
}
},
"id": "RHSA-2012:0477",
"initial_release_date": "2012-04-12T16:26:00+00:00",
"revision_history": [
{
"date": "2012-04-12T16:26:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2012-04-12T16:35:19+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-09-25T11:45:03+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat MRG Grid for RHEL 6 Server v.2",
"product": {
"name": "Red Hat MRG Grid for RHEL 6 Server v.2",
"product_id": "6Server-MRG-Grid-2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_mrg:2:server:el6"
}
}
},
{
"category": "product_name",
"name": "Red Hat MRG Management for RHEL 6 Server v.2",
"product": {
"name": "Red Hat MRG Management for RHEL 6 Server v.2",
"product_id": "6Server-MRG-Management-2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_mrg:2:server:el6"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise MRG for RHEL-6"
},
{
"branches": [
{
"category": "product_version",
"name": "cumin-0:0.1.5192-5.el6.noarch",
"product": {
"name": "cumin-0:0.1.5192-5.el6.noarch",
"product_id": "cumin-0:0.1.5192-5.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cumin@0.1.5192-5.el6?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "cumin-0:0.1.5192-5.el6.src",
"product": {
"name": "cumin-0:0.1.5192-5.el6.src",
"product_id": "cumin-0:0.1.5192-5.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cumin@0.1.5192-5.el6?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "cumin-0:0.1.5192-5.el6.noarch as a component of Red Hat MRG Grid for RHEL 6 Server v.2",
"product_id": "6Server-MRG-Grid-2:cumin-0:0.1.5192-5.el6.noarch"
},
"product_reference": "cumin-0:0.1.5192-5.el6.noarch",
"relates_to_product_reference": "6Server-MRG-Grid-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cumin-0:0.1.5192-5.el6.src as a component of Red Hat MRG Grid for RHEL 6 Server v.2",
"product_id": "6Server-MRG-Grid-2:cumin-0:0.1.5192-5.el6.src"
},
"product_reference": "cumin-0:0.1.5192-5.el6.src",
"relates_to_product_reference": "6Server-MRG-Grid-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cumin-0:0.1.5192-5.el6.noarch as a component of Red Hat MRG Management for RHEL 6 Server v.2",
"product_id": "6Server-MRG-Management-2:cumin-0:0.1.5192-5.el6.noarch"
},
"product_reference": "cumin-0:0.1.5192-5.el6.noarch",
"relates_to_product_reference": "6Server-MRG-Management-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cumin-0:0.1.5192-5.el6.src as a component of Red Hat MRG Management for RHEL 6 Server v.2",
"product_id": "6Server-MRG-Management-2:cumin-0:0.1.5192-5.el6.src"
},
"product_reference": "cumin-0:0.1.5192-5.el6.src",
"relates_to_product_reference": "6Server-MRG-Management-2"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2012-1575",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2012-03-16T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "805712"
}
],
"notes": [
{
"category": "description",
"text": "Multiple cross-site scripting (XSS) vulnerabilities in Cumin before r5238 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) widgets or (2) pages.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "cumin: multiple XSS flaws",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-MRG-Grid-2:cumin-0:0.1.5192-5.el6.noarch",
"6Server-MRG-Grid-2:cumin-0:0.1.5192-5.el6.src",
"6Server-MRG-Management-2:cumin-0:0.1.5192-5.el6.noarch",
"6Server-MRG-Management-2:cumin-0:0.1.5192-5.el6.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2012-1575"
},
{
"category": "external",
"summary": "RHBZ#805712",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=805712"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2012-1575",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-1575"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-1575",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2012-1575"
}
],
"release_date": "2012-03-06T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2012-04-12T16:26:00+00:00",
"details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
"product_ids": [
"6Server-MRG-Grid-2:cumin-0:0.1.5192-5.el6.noarch",
"6Server-MRG-Grid-2:cumin-0:0.1.5192-5.el6.src",
"6Server-MRG-Management-2:cumin-0:0.1.5192-5.el6.noarch",
"6Server-MRG-Management-2:cumin-0:0.1.5192-5.el6.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2012:0477"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"6Server-MRG-Grid-2:cumin-0:0.1.5192-5.el6.noarch",
"6Server-MRG-Grid-2:cumin-0:0.1.5192-5.el6.src",
"6Server-MRG-Management-2:cumin-0:0.1.5192-5.el6.noarch",
"6Server-MRG-Management-2:cumin-0:0.1.5192-5.el6.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "cumin: multiple XSS flaws"
}
]
}
fkie_cve-2012-1575
Vulnerability from fkie_nvd
Published
2012-04-22 18:55
Modified
2025-04-11 00:51
Severity ?
Summary
Multiple cross-site scripting (XSS) vulnerabilities in Cumin before r5238 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) widgets or (2) pages.
References
Impacted products
| Vendor | Product | Version | |
|---|---|---|---|
| trevor_mckay | cumin | * |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:trevor_mckay:cumin:*:*:*:*:*:*:*:*",
"matchCriteriaId": "891815E0-7EDB-4D28-92BB-FAD4D3D7CB83",
"versionEndIncluding": "r5237",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Multiple cross-site scripting (XSS) vulnerabilities in Cumin before r5238 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) widgets or (2) pages."
},
{
"lang": "es",
"value": "M\u00faltiples vulnerabilidades de ejecuci\u00f3n de secuencias de comandos en sitios cruzados (XSS) en Cumin antes de r5238, permite a atacantes remotos inyectar secuencias de comandos web o c\u00f3digo HTML de su elecci\u00f3n a trav\u00e9s de vectores que incluyen (1) widgets o (2) pages."
}
],
"id": "CVE-2012-1575",
"lastModified": "2025-04-11T00:51:21.963",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "MEDIUM",
"cvssData": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"exploitabilityScore": 8.6,
"impactScore": 2.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
]
},
"published": "2012-04-22T18:55:04.560",
"references": [
{
"source": "secalert@redhat.com",
"url": "http://rhn.redhat.com/errata/RHSA-2012-0476.html"
},
{
"source": "secalert@redhat.com",
"url": "http://rhn.redhat.com/errata/RHSA-2012-0477.html"
},
{
"source": "secalert@redhat.com",
"url": "http://secunia.com/advisories/48810"
},
{
"source": "secalert@redhat.com",
"url": "http://secunia.com/advisories/48829"
},
{
"source": "secalert@redhat.com",
"url": "http://www.securityfocus.com/bid/53000"
},
{
"source": "secalert@redhat.com",
"url": "http://www.securitytracker.com/id?1026921"
},
{
"source": "secalert@redhat.com",
"url": "https://bugzilla.redhat.com/attachment.cgi?id=571986"
},
{
"source": "secalert@redhat.com",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=805712"
},
{
"source": "secalert@redhat.com",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/74844"
},
{
"source": "secalert@redhat.com",
"url": "https://fedorahosted.org/pipermail/cumin-developers/2012-March/000796.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://rhn.redhat.com/errata/RHSA-2012-0476.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://rhn.redhat.com/errata/RHSA-2012-0477.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://secunia.com/advisories/48810"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://secunia.com/advisories/48829"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.securityfocus.com/bid/53000"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.securitytracker.com/id?1026921"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://bugzilla.redhat.com/attachment.cgi?id=571986"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=805712"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/74844"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://fedorahosted.org/pipermail/cumin-developers/2012-March/000796.html"
}
],
"sourceIdentifier": "secalert@redhat.com",
"vulnStatus": "Deferred",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-79"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
gsd-2012-1575
Vulnerability from gsd
Modified
2023-12-13 01:20
Details
Multiple cross-site scripting (XSS) vulnerabilities in Cumin before r5238 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) widgets or (2) pages.
Aliases
Aliases
{
"GSD": {
"alias": "CVE-2012-1575",
"description": "Multiple cross-site scripting (XSS) vulnerabilities in Cumin before r5238 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) widgets or (2) pages.",
"id": "GSD-2012-1575",
"references": [
"https://access.redhat.com/errata/RHSA-2012:0477",
"https://access.redhat.com/errata/RHSA-2012:0476"
]
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2012-1575"
],
"details": "Multiple cross-site scripting (XSS) vulnerabilities in Cumin before r5238 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) widgets or (2) pages.",
"id": "GSD-2012-1575",
"modified": "2023-12-13T01:20:17.925509Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "secalert@redhat.com",
"ID": "CVE-2012-1575",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Multiple cross-site scripting (XSS) vulnerabilities in Cumin before r5238 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) widgets or (2) pages."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://rhn.redhat.com/errata/RHSA-2012-0476.html",
"refsource": "MISC",
"url": "http://rhn.redhat.com/errata/RHSA-2012-0476.html"
},
{
"name": "http://rhn.redhat.com/errata/RHSA-2012-0477.html",
"refsource": "MISC",
"url": "http://rhn.redhat.com/errata/RHSA-2012-0477.html"
},
{
"name": "http://secunia.com/advisories/48810",
"refsource": "MISC",
"url": "http://secunia.com/advisories/48810"
},
{
"name": "http://secunia.com/advisories/48829",
"refsource": "MISC",
"url": "http://secunia.com/advisories/48829"
},
{
"name": "http://www.securityfocus.com/bid/53000",
"refsource": "MISC",
"url": "http://www.securityfocus.com/bid/53000"
},
{
"name": "http://www.securitytracker.com/id?1026921",
"refsource": "MISC",
"url": "http://www.securitytracker.com/id?1026921"
},
{
"name": "https://bugzilla.redhat.com/attachment.cgi?id=571986",
"refsource": "MISC",
"url": "https://bugzilla.redhat.com/attachment.cgi?id=571986"
},
{
"name": "https://exchange.xforce.ibmcloud.com/vulnerabilities/74844",
"refsource": "MISC",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/74844"
},
{
"name": "https://fedorahosted.org/pipermail/cumin-developers/2012-March/000796.html",
"refsource": "MISC",
"url": "https://fedorahosted.org/pipermail/cumin-developers/2012-March/000796.html"
},
{
"name": "https://bugzilla.redhat.com/show_bug.cgi?id=805712",
"refsource": "MISC",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=805712"
}
]
}
},
"nvd.nist.gov": {
"configurations": {
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:trevor_mckay:cumin:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "r5237",
"vulnerable": true
}
],
"operator": "OR"
}
]
},
"cve": {
"CVE_data_meta": {
"ASSIGNER": "secalert@redhat.com",
"ID": "CVE-2012-1575"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "en",
"value": "Multiple cross-site scripting (XSS) vulnerabilities in Cumin before r5238 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) widgets or (2) pages."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://bugzilla.redhat.com/show_bug.cgi?id=805712",
"refsource": "CONFIRM",
"tags": [],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=805712"
},
{
"name": "https://bugzilla.redhat.com/attachment.cgi?id=571986",
"refsource": "CONFIRM",
"tags": [],
"url": "https://bugzilla.redhat.com/attachment.cgi?id=571986"
},
{
"name": "[cumin-developers] 20120306 r5238 - in trunk: cumin/python/cumin cumin/python/cumin/grid cumin/python/cumin/inventory cumin/python/cumin/messaging rosemary/python/rosemary wooly/python/wooly",
"refsource": "MLIST",
"tags": [],
"url": "https://fedorahosted.org/pipermail/cumin-developers/2012-March/000796.html"
},
{
"name": "48829",
"refsource": "SECUNIA",
"tags": [],
"url": "http://secunia.com/advisories/48829"
},
{
"name": "48810",
"refsource": "SECUNIA",
"tags": [],
"url": "http://secunia.com/advisories/48810"
},
{
"name": "cumin-redhat-unspec-xss(74844)",
"refsource": "XF",
"tags": [],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/74844"
},
{
"name": "1026921",
"refsource": "SECTRACK",
"tags": [],
"url": "http://www.securitytracker.com/id?1026921"
},
{
"name": "53000",
"refsource": "BID",
"tags": [],
"url": "http://www.securityfocus.com/bid/53000"
},
{
"name": "RHSA-2012:0477",
"refsource": "REDHAT",
"tags": [],
"url": "http://rhn.redhat.com/errata/RHSA-2012-0477.html"
},
{
"name": "RHSA-2012:0476",
"refsource": "REDHAT",
"tags": [],
"url": "http://rhn.redhat.com/errata/RHSA-2012-0476.html"
}
]
}
},
"impact": {
"baseMetricV2": {
"acInsufInfo": false,
"cvssV2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"exploitabilityScore": 8.6,
"impactScore": 2.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "MEDIUM",
"userInteractionRequired": false
}
},
"lastModifiedDate": "2023-02-13T04:33Z",
"publishedDate": "2012-04-22T18:55Z"
}
}
}
ghsa-v47v-hq34-79pq
Vulnerability from github
Published
2022-05-14 04:01
Modified
2022-05-14 04:01
VLAI Severity ?
Details
Multiple cross-site scripting (XSS) vulnerabilities in Cumin before r5238 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) widgets or (2) pages.
{
"affected": [],
"aliases": [
"CVE-2012-1575"
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2012-04-22T18:55:00Z",
"severity": "MODERATE"
},
"details": "Multiple cross-site scripting (XSS) vulnerabilities in Cumin before r5238 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) widgets or (2) pages.",
"id": "GHSA-v47v-hq34-79pq",
"modified": "2022-05-14T04:01:32Z",
"published": "2022-05-14T04:01:32Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2012-1575"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2012:0476"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2012:0477"
},
{
"type": "WEB",
"url": "https://access.redhat.com/security/cve/CVE-2012-1575"
},
{
"type": "WEB",
"url": "https://bugzilla.redhat.com/attachment.cgi?id=571986"
},
{
"type": "WEB",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=805712"
},
{
"type": "WEB",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/74844"
},
{
"type": "WEB",
"url": "https://fedorahosted.org/pipermail/cumin-developers/2012-March/000796.html"
},
{
"type": "WEB",
"url": "http://rhn.redhat.com/errata/RHSA-2012-0476.html"
},
{
"type": "WEB",
"url": "http://rhn.redhat.com/errata/RHSA-2012-0477.html"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/48810"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/48829"
},
{
"type": "WEB",
"url": "http://www.securityfocus.com/bid/53000"
},
{
"type": "WEB",
"url": "http://www.securitytracker.com/id?1026921"
}
],
"schema_version": "1.4.0",
"severity": []
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…