Lucene search
HistorySep 15, 2012 - 5:55 p.m.
CVE-2012-3458
beaker
pycrypto
aes
ecb
vulnerability
nvd
6.4 Medium
AI Score
Confidence
Low
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
0.004 Low
EPSS
Percentile
72.6%
Beaker before 1.6.4, when using PyCrypto to encrypt sessions, uses AES in ECB cipher mode, which might allow remote attackers to obtain portions of sensitive session data via unspecified vectors.
| CPE | Name | Operator | Version |
|---|---|---|---|
| python:beaker | python beaker | le | 1.6.4 |
Related
nessus
nessus
EulerOS 2.0 SP3 : python-beaker (EulerOS-SA-2021-2608)
2021-10-25 00:00:00
Debian DSA-2541-1 : beaker - information disclosure
2012-09-10 00:00:00
securityvulns
securityvulns
[SECURITY] [DSA 2541-1] beaker security update
2012-10-29 00:00:00
Beaker information leakage
2012-10-29 00:00:00
cvelist
cvelist
CVE-2012-3458
2012-09-15 17:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for python-beaker (EulerOS-SA-2021-2608)
2021-10-26 00:00:00
Debian Security Advisory DSA 2541-1 (beaker)
2012-09-15 00:00:00
Debian: Security Advisory (DSA-2541-1)
2012-09-15 00:00:00
prion
prion
Code injection
2012-09-15 17:55:00
github
github
Beaker Sensitive Information Disclosure vulnerability
2022-05-17 05:22:19
debian
debian
[SECURITY] [DSA 2541-1] beaker security update
2012-09-07 18:46:58
osv
osv
PYSEC-2012-1
2012-09-15 17:55:00
debiancve
debiancve
CVE-2012-3458
2012-09-15 17:55:00
ubuntucve
ubuntucve
CVE-2012-3458
2012-09-15 00:00:00
6.4 Medium
AI Score
Confidence
Low
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
0.004 Low
EPSS
Percentile
72.6%
Related for CVE-2012-3458