CVE-2012-2684
published 2012-09-28CVE-2012-2684: Multiple SQL injection vulnerabilities in the get_sample_filters_by_signature function in Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging…
PriorityP345high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
2.13%
79.8th percentile
Multiple SQL injection vulnerabilities in the get_sample_filters_by_signature function in Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, allow remote attackers to execute arbitrary SQL commands via the (1) agent or (2) object id.
Affected
21 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| redhat | enterprise_mrg | — | — |
| trevor_mckay | cumin | <= 0.1.5192-4 | — |
| trevor_mckay | cumin | — | — |
| trevor_mckay | cumin | — | — |
| trevor_mckay | cumin | — | — |
| trevor_mckay | cumin | — | — |
| trevor_mckay | cumin | — | — |
| trevor_mckay | cumin | — | — |
| trevor_mckay | cumin | — | — |
| trevor_mckay | cumin | — | — |
| trevor_mckay | cumin | — | — |
| trevor_mckay | cumin | — | — |
| trevor_mckay | cumin | — | — |
| trevor_mckay | cumin | — | — |
| trevor_mckay | cumin | — | — |
| trevor_mckay | cumin | — | — |
| trevor_mckay | cumin | — | — |
| trevor_mckay | cumin | — | — |
| trevor_mckay | cumin | — | — |
| trevor_mckay | cumin | — | — |
| trevor_mckay | cumin | — | — |
CVSS provenance
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
vendor_redhat7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-364j-8jm7-f886: Multiple SQL injection vulnerabilities in the get_sample_filters_by_signature function in Cumin before 0
ghsa_unreviewed·2022-05-13
CVE-2012-2684 [HIGH] CWE-89 GHSA-364j-8jm7-f886: Multiple SQL injection vulnerabilities in the get_sample_filters_by_signature function in Cumin before 0
Multiple SQL injection vulnerabilities in the get_sample_filters_by_signature function in Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, allow remote attackers to execute arbitrary SQL commands via the (1) agent or (2) object id.
Red Hat
cumin: SQL injection flaw
vendor_redhat·2012-09-19·CVSS 7.5
CVE-2012-2684 [HIGH] cumin: SQL injection flaw
cumin: SQL injection flaw
Multiple SQL injection vulnerabilities in the get_sample_filters_by_signature function in Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, allow remote attackers to execute arbitrary SQL commands via the (1) agent or (2) object id.
Package: cumin (Red Hat Enterprise MRG 1) - Will not fix
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2012-2680 CVE-2012-2681 CVE-2012-2683 CVE-2012-2684 CVE-2012-2685 CVE-2012-2734 CVE-2012-2735 CVE-2012-3459 cumin various flaws [fedora-all]
bugzilla·2012-09-19·CVSS 5.0
CVE-2012-2680 [MEDIUM] CVE-2012-2680 CVE-2012-2681 CVE-2012-2683 CVE-2012-2684 CVE-2012-2685 CVE-2012-2734 CVE-2012-2735 CVE-2012-3459 cumin various flaws [fedora-all]
CVE-2012-2680 CVE-2012-2681 CVE-2012-2683 CVE-2012-2684 CVE-2012-2685 CVE-2012-2734 CVE-2012-2735 CVE-2012-3459 cumin various flaws [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected Fedora
versions.
For comments that are specific to the vulnerability please use bugs filed
against "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When creating a Bodhi update request, please include this bug ID and the
bug IDs of this bug's parent bugs filed against the "Security Response"
product (the top-level CVE bugs). Please mention the CVE IDs being fixed
in the RPM changelog when available.
Bodhi update submiss
Bugzilla
CVE-2012-2684 cumin: SQL injection flaw
bugzilla·2012-06-08·CVSS 7.5
CVE-2012-2684 [HIGH] CVE-2012-2684 cumin: SQL injection flaw
CVE-2012-2684 cumin: SQL injection flaw
Florian Weimer reported an SQL injection flaw in Cumin, where the agent variable is not properly encoded. This could allow a remote user to manipulate the contents of the backend database using a specially-crafted URL.
Discussion:
Started investigating this.
Bad values for agent or object ids are constructed (indirectly) in the get_sample_filters_by_signature() routine. This routine is used to pull certain values out of the URL to use as a lookup for an object in question.
The root of the issue is the way that SQL filter text is generated using Python string concatenation. According to docs associated with psycopg2 (our db adapter), using string concatenation directly leads to SQL injection vulnerabilities due to bad quoting. psycopg2 provides a
http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=830245http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092543.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2012-November/092562.htmlhttp://rhn.redhat.com/errata/RHSA-2012-1278.htmlhttp://rhn.redhat.com/errata/RHSA-2012-1281.htmlhttp://secunia.com/advisories/50660http://www.securityfocus.com/bid/55618http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=830245http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092543.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2012-November/092562.htmlhttp://rhn.redhat.com/errata/RHSA-2012-1278.htmlhttp://rhn.redhat.com/errata/RHSA-2012-1281.htmlhttp://secunia.com/advisories/50660http://www.securityfocus.com/bid/55618
2012-09-28
Published