NetSight
IP …
medium4.9

CVE-2012-3459

Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, allows remote authenticated users to modify Condor attributes and…

Impact

Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, allows remote authenticated users to modify Condor attributes and possibly gain privileges via crafted additional parameters in an HTTP POST request, which triggers a job attribute change request to Condor.

Affected products

VendorProductAffected versions
Trevor MckayCumin
through 0.1.5192-4
Versions 0.1.3160-1, 0.1.4369-1, 0.1.4410-2, 0.1.4494-1, 0.1.4794-1
RedhatEnterprise Mrg
Version 2.0

Weakness classification

CWE-264

References