CVE-2012-3359 | BDVDB-2026-60671 Detail

Description#

Luci in Red Hat Conga stores the user's username and password in a Base64 encoded string in the __ac session cookie, which allows attackers to gain privileges by accessing this cookie. NOTE: this issue has been SPLIT due to different vulnerability types. Use CVE-2013-7347 for the incorrect enforcement of a user timeout.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12014-03-30Record published in the CVE List.
2. Version 22024-08-06Most recent update recorded in the CVE List.