CVE-2012-2682 Denial of service in n/a

What is CVE-2012-2682?

CVE-2012-2682 is a medium-severity denial of service vulnerability in Redhat Enterprise Mrg, published on 19 Jul 2014. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

Cumin (aka MRG Management Console), as used in Red Hat Enterprise MRG 2.5, allows attackers with certain database privileges to cause a denial of service (inaccessible page) via a non-ASCII character in the name of a link.

Weakness: CWE-20

Which versions are affected by CVE-2012-2682?

It affects 1 product.

Products include Redhat Enterprise Mrg.

How do I fix CVE-2012-2682?

Apply the vendor's patch.

Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.

Is CVE-2012-2682 being exploited?

There is no known exploitation of CVE-2012-2682 in the wild and no public exploit code.

Other vulnerabilities in Redhat Enterprise Mrg

• CVE-2012-3460 Hardcoded credentials in cumin Critical 9.8
• CVE-2013-4461 SQL injection in n/a High 7.5
• CVE-2012-2684 SQL injection in n/a High 7.5
• CVE-2010-4179 Missing authorization in n/a High 7.5
• CVE-2013-4405 Cross-site request forgery in n/a Medium 6.8

All Redhat Enterprise Mrg vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-24fh-vxfp-5g6v.