Unrated severityNVD Advisory· Published Mar 31, 2014· Updated Jun 16, 2026
CVE-2012-3359
CVE-2012-3359
Description
Luci in Red Hat Conga stores the user's username and password in a Base64 encoded string in the __ac session cookie, which allows attackers to gain privileges by accessing this cookie. NOTE: this issue has been SPLIT due to different vulnerability types. Use CVE-2013-7347 for the incorrect enforcement of a user timeout.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:o:redhat:enterprise_linux:5:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
2- rhn.redhat.com/errata/RHSA-2013-0128.htmlnvdVendor Advisory
- bugzilla.redhat.com/show_bug.cginvd
News mentions
0No linked articles in our index yet.