CVE-2012-3458
2 advisories.
PyPI/beaker CVE-2012-3458: medium 5.3, EPSS 2.47%
Beaker Sensitive Information Disclosure vulnerability
Action: Upgrade beaker to 1.6.4 or later.
pip install beaker==1.6.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.6.4 | - |
Fixed versions
| 1.6.4 |
Sources
- osv: GHSA-39vm-p9mr-4r27
- https://nvd.nist.gov/vuln/detail/CVE-2012-3458
- https://github.com/bbangert/beaker/commit/91becae76101cf87ce8cbfabe3af2622fc328fe5
- https://bugzilla.redhat.com/show_bug.cgi?id=809267
- https://github.com/bbangert/beaker
- https://github.com/pypa/advisory-database/tree/main/vulns/beaker/PYSEC-2012-1.yaml
- https://web.archive.org/web/20140724164516/http://secunia.com/advisories/50226
- https://web.archive.org/web/20140725025612/http://secunia.com/advisories/50520
- http://www.debian.org/security/2012/dsa-2541
- http://www.openwall.com/lists/oss-security/2012/08/13/10
CVE-2012-3458 · published · modified · JSON
PyPI/beaker CVE-2012-3458: unknown, EPSS 2.47%
Beaker before 1.6.4, when using PyCrypto to encrypt sessions, uses AES in ECB cipher mode, which might allow remote attackers to obtain portions of sensitive session data via unspecified vectors.
Action: Upgrade beaker to 1.6.5.post1 or later.
pip install beaker==1.6.5.post1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.6.5.post1 | - |
Fixed versions
| 1.6.5.post1 |
Sources
- osv: PYSEC-2012-1
- http://www.debian.org/security/2012/dsa-2541
- http://secunia.com/advisories/50520
- http://www.openwall.com/lists/oss-security/2012/08/13/10
- https://github.com/bbangert/beaker/commit/91becae76101cf87ce8cbfabe3af2622fc328fe5
- http://secunia.com/advisories/50226
- https://bugzilla.redhat.com/show_bug.cgi?id=809267
- https://github.com/advisories/GHSA-39vm-p9mr-4r27
CVE-2012-3458 · published · modified · JSON