CVE-2012-2734: redhat enterprise_mrg Cross-Site Request Forgery (CSRF)
Vulnerability summary
CVE-2012-2734 is a medium (CVSS 6.8) Cross-Site Request Forgery (CSRF) vulnerability in redhat enterprise_mrg. EPSS estimates a 0.92% chance of exploitation in the next 30 days, higher than 59.5% of scored vulnerabilities. 1 public exploit is recorded.
Advisory lineage
Upstream 0 · Downstream 2Timeline
- 28-09-2012PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, allow remote attackers to hijack the authentication of arbitrary users for requests that execute commands via unspecified vectors.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
0.92%
Chance of exploitation in the next 30 days
Percentile
60%
Versus all other CVEs
30-day change
0.00 pp
From 0.92% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundExploit Reference (bugzilla.redhat.com)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Redhat1 product
Trevor_mckay1 product
- cumin≤ 0.1.5192-4 | 0.1.3160-1 | 0.1.4369-1 | 0.1.4410-2 | 0.1.4494-1 | 0.1.4794-1 | 0.1.4916-1 | 0.1.5033-1 | 0.1.5037-1 | 0.1.5054-1 | 0.1.5068-1 | 0.1.5092-1 | 0.1.5098-2 | 0.1.5105-1 | 0.1.5137-1 | 0.1.5137-2 | 0.1.5137-3 | 0.1.5137-4 | 0.1.5137-5 | 0.1.5192-1
2 vendors · 2 products