CVE-2012-3359 Information disclosure in n/a
Attackers can gain privileges by accessing the Base64 encoded session cookie containing user credentials in Red Hat Conga Luci.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2012-3359?
CVE-2012-3359 is a low-severity vulnerability in Redhat Enterprise Linux, published on 30 Mar 2014. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Luci in Red Hat Conga stores the user's username and password in a Base64 encoded string in the __ac session cookie, which allows attackers to gain privileges by accessing this cookie. NOTE: this issue has been SPLIT due to different vulnerability types. Use CVE-2013-7347 for the incorrect enforcement of a user timeout.
Weakness: CWE-255
Which versions are affected by CVE-2012-3359?
It affects 2 products.
Linux distribution packages (4)
conga Red Hat:rhel_cluster:5 | All versions | 0:0.12.2-64.el5 |
conga-debuginfo Red Hat:rhel_cluster:5 | All versions | 0:0.12.2-64.el5 |
luci Red Hat:rhel_cluster:5 | All versions | 0:0.12.2-64.el5 |
ricci Red Hat:rhel_cluster:5 | All versions | 0:0.12.2-64.el5 |
Products include Redhat Conga, Redhat Enterprise Linux.
How do I fix CVE-2012-3359?
Apply the vendor's patch.
Is CVE-2012-3359 being exploited?
There is no known exploitation of CVE-2012-3359 in the wild and no public exploit code.
Other vulnerabilities in Redhat Enterprise Linux
Sources
Also known as GHSA-865x-x787-2cjj, RHSA-2013:0128.