Red Hat Security AdvisoryRHSA-2014:0859
Red Hat Enterprise MRG 2.5 Messaging and Grid security update
Released 2014-07-09 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- MRG Grid for RHEL 5 Server v.2 cumin-0.1.5796-4.el5_9
- MRG Management for RHEL 5 Server v.2 cumin-0.1.5796-4.el5_9
Fixes 2 records
Priority LOW 26
Cumin (aka MRG Management Console), as used in Red Hat Enterprise MRG 2.5, allows attackers with certain database privileges to cause a denial of service (inaccessible page) via a non-ASCII character in the name of a lin…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.01791 · Published 2014-07-19 · Partial fix CWE-20
Priority LOW 23
Cumin (aka MRG Management Console), as used in Red Hat Enterprise MRG 2.5, does not include the HTTPOnly flag in a Set-Cookie header for the session cookie, which makes it easier for remote attackers to obtain potentiall…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01585 · Published 2014-07-11 · Fixed CWE-200
