Unrated severityNVD Advisory· Published Mar 31, 2014· Updated May 6, 2026
CVE-2012-3359
CVE-2012-3359
Description
Luci in Red Hat Conga stores the user's username and password in a Base64 encoded string in the __ac session cookie, which allows attackers to gain privileges by accessing this cookie. NOTE: this issue has been SPLIT due to different vulnerability types. Use CVE-2013-7347 for the incorrect enforcement of a user timeout.
Affected products
2- cpe:2.3:o:redhat:enterprise_linux:5:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- rhn.redhat.com/errata/RHSA-2013-0128.htmlnvdVendor Advisory
- bugzilla.redhat.com/show_bug.cginvd
News mentions
0No linked articles in our index yet.