CVE-2012-3458 Beaker Sensitive Information Disclosure vulnerability
MediumCVSS 4.3
EPSS 2.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Beaker before 1.6.4, when using PyCrypto to encrypt sessions, uses AES in ECB cipher mode, which might allow remote attackers to obtain portions of sensitive session data via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pypi beaker(PyPI) | < 1.6.4 | 1.6.4 |
| pypi beaker(PyPI) | = 0.5 | No fix listed |
| pypi beaker(PyPI) | = 0.6 | No fix listed |
| pypi beaker(PyPI) | = 0.6.1 | No fix listed |
| pypi beaker(PyPI) | = 0.6.2 | No fix listed |
| pypi beaker(PyPI) | = 0.6.3 | No fix listed |
| pypi beaker(PyPI) | = 0.7 | No fix listed |
| pypi beaker(PyPI) | = 0.7.1 | No fix listed |
| pypi beaker(PyPI) | = 0.7.2 | No fix listed |
| pypi beaker(PyPI) | = 0.7.3 | No fix listed |
| pypi beaker(PyPI) | = 0.7.4 | No fix listed |
| pypi beaker(PyPI) | = 0.7.5 | No fix listed |
| pypi beaker(PyPI) | = 0.8 | No fix listed |
| pypi beaker(PyPI) | = 0.8.1 | No fix listed |
| pypi beaker(PyPI) | = 0.9 | No fix listed |
| pypi beaker(PyPI) | = 0.9.1 | No fix listed |
| pypi beaker(PyPI) | = 0.9.2 | No fix listed |
| pypi beaker(PyPI) | = 0.9.3 | No fix listed |
| pypi beaker(PyPI) | = 0.9.4 | No fix listed |
| pypi beaker(PyPI) | = 0.9.5 | No fix listed |
| pypi beaker(PyPI) | = 1.0 | No fix listed |
| pypi beaker(PyPI) | = 1.0.1 | No fix listed |
| pypi beaker(PyPI) | = 1.0.2 | No fix listed |
| pypi beaker(PyPI) | = 1.0.3 | No fix listed |
| pypi beaker(PyPI) | = 1.1 | No fix listed |
Show 63 more
| Product | Affected versions | Fixed in |
|---|---|---|
| pypi beaker(PyPI) | = 1.1.1 | No fix listed |
| pypi beaker(PyPI) | = 1.1.2 | No fix listed |
| pypi beaker(PyPI) | = 1.1.3 | No fix listed |
| pypi beaker(PyPI) | = 1.2 | No fix listed |
| pypi beaker(PyPI) | = 1.2.1 | No fix listed |
| pypi beaker(PyPI) | = 1.2.2 | No fix listed |
| pypi beaker(PyPI) | = 1.2.3 | No fix listed |
| pypi beaker(PyPI) | = 1.3 | No fix listed |
| pypi beaker(PyPI) | = 1.3.1 | No fix listed |
| pypi beaker(PyPI) | = 1.3.1dev | No fix listed |
| pypi beaker(PyPI) | = 1.4 | No fix listed |
| pypi beaker(PyPI) | = 1.4.1 | No fix listed |
| pypi beaker(PyPI) | = 1.4.2 | No fix listed |
| pypi beaker(PyPI) | = 1.4.3 | No fix listed |
| pypi beaker(PyPI) | = 1.5 | No fix listed |
| pypi beaker(PyPI) | = 1.5.1 | No fix listed |
| pypi beaker(PyPI) | = 1.5.2 | No fix listed |
| pypi beaker(PyPI) | = 1.5.3 | No fix listed |
| pypi beaker(PyPI) | = 1.5.4 | No fix listed |
| pypi beaker(PyPI) | = 1.6 | No fix listed |
| pypi beaker(PyPI) | = 1.6.1 | No fix listed |
| pypi beaker(PyPI) | = 1.6.2 | No fix listed |
| pypi beaker(PyPI) | = 1.6.3 | No fix listed |
| pypi beaker(PyPI) | < 1.6.5.post1 | 1.6.5.post1 |
| pypi beaker(PyPI) | = 1.6.4 | No fix listed |
| pypi beaker(PyPI) | = 1.6.5 | No fix listed |
| pypi beaker(PyPI) | = v1.6.2 | No fix listed |
| pypi beaker(PyPI) | = v.1.6.1 | No fix listed |
| pypi beaker(PyPI) | = v1.6 | No fix listed |
| pypi beaker(PyPI) | = v1.5.4 | No fix listed |
| pypi beaker(PyPI) | = v1.5.3 | No fix listed |
| pypi beaker(PyPI) | = v1.5.2 | No fix listed |
| pypi beaker(PyPI) | = v1.5.1 | No fix listed |
| pypi beaker(PyPI) | = v1.5 | No fix listed |
| pypi beaker(PyPI) | = v1.4.2 | No fix listed |
| pypi beaker(PyPI) | = v1.4.1 | No fix listed |
| pypi beaker(PyPI) | = v1.4 | No fix listed |
| pypi beaker(PyPI) | = v1.3.1 | No fix listed |
| pypi beaker(PyPI) | = v1.3 | No fix listed |
| pypi beaker(PyPI) | = v1.2.2 | No fix listed |
| pypi beaker(PyPI) | = v1.2.1 | No fix listed |
| pypi beaker(PyPI) | = v1.2 | No fix listed |
| pypi beaker(PyPI) | = v1.1.3 | No fix listed |
| pypi beaker(PyPI) | = v1.1.2 | No fix listed |
| pypi beaker(PyPI) | = v1.1.1 | No fix listed |
| pypi beaker(PyPI) | = v1.1 | No fix listed |
| pypi beaker(PyPI) | = v1.0.3 | No fix listed |
| pypi beaker(PyPI) | = v1.0.2 | No fix listed |
| pypi beaker(PyPI) | = v1.0.1 | No fix listed |
| pypi beaker(PyPI) | = v1.0 | No fix listed |
| pypi beaker(PyPI) | = v0.9.5 | No fix listed |
| pypi beaker(PyPI) | = v0.9.4 | No fix listed |
| pypi beaker(PyPI) | = v0.9.3 | No fix listed |
| pypi beaker(PyPI) | = v0.9.2 | No fix listed |
| pypi beaker(PyPI) | = v0.9 | No fix listed |
| pypi beaker(PyPI) | = v0.8.1 | No fix listed |
| pypi beaker(PyPI) | = v0.8 | No fix listed |
| pypi beaker(PyPI) | = v0.7.5 | No fix listed |
| pypi beaker(PyPI) | = v0.5 | No fix listed |
| debian/beaker(Debian:12) | < 1.6.3-1.1 | 1.6.3-1.1 |
| debian/beaker(Debian:13) | < 1.6.3-1.1 | 1.6.3-1.1 |
| debian/beaker(Debian:14) | < 1.6.3-1.1 | 1.6.3-1.1 |
| python beaker | <= 1.6.4 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com patch
- bugzilla.redhat.com issue-tracking
- github.com product
- github.com
- web.archive.org
- web.archive.org
- DSA-2541 vendor-advisory
- [oss-security] 20120813 ANN: Beaker 1.6.4 released with important security update mailing-list
- 50520 third-party-advisory vendor-advisory
- 50226 third-party-advisory vendor-advisory
- github.com vendor-advisory
- Debian Security Tracker CVE-2012-3458 vendor-advisory
- bugs.debian.org issue-tracking