Vulnerability Database

290,206

Total vulnerabilities in the database

CVE-2012-3359

Luci in Red Hat Conga stores the user's username and password in a Base64 encoded string in the __ac session cookie, which allows attackers to gain privileges by accessing this cookie. NOTE: this issue has been SPLIT due to different vulnerability types. Use CVE-2013-7347 for the incorrect enforcement of a user timeout.

  • Published: Mar 31, 2014
  • Updated: Nov 8, 2023
  • CVE: CVE-2012-3359
  • Severity: Low
  • Exploit:

CVSS v2:

  • Severity: Low
  • Score: 3.7
  • AV:L/AC:H/Au:N/C:P/I:P/A:P

CWEs:

Software From Fixed in
redhat / conga - -
redhat / enterprise_linux 5 5.x