Red Hat Security Advisory

RHSA-2013:0128

conga security, bug fix, and enhancement update

Released 2013-01-08 · Red Hat rating Low · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Clustering (v. 5 server) conga-0.12.2-64.el5, luci-0.12.2-64.el5, luci-0.12.2-64.el5.i386 +6

Fixes 1 record

TI-2012-02890 CVE-2012-3359 · GHSA-865x-x787-2cjj

Luci in Red Hat Conga stores the user's username and password in a Base64 encoded string…

LOW 18

Luci in Red Hat Conga stores the user's username and password in a Base64 encoded string in the __ac session cookie, which allows attackers to gain privileges by accessing this cookie.

CVSS 2.0LOW 3.7 Local No auth Interaction — EPSS 0.00337 Published 2014-03-30 Partial fix CWE-255