Skip to content
Heist/ feed
Unrated

CVE-2012-3458

Type: advisorySource: OSV1 source record

Beaker before 1.6.4, when using PyCrypto to encrypt sessions, uses AES in ECB cipher mode, which might allow remote attackers to obtain portions of sensitive session data via unspecified vectors.

Announced Group revision 1
Original source ↗

CVE-2012-3458

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:CVE-2012-3458

Related CVEs
CVE-2012-3458

Source reference: /id

Publisher severity

No explicit severity was provided.

Event
#83723 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement