VULNERABILITY INTELLIGENCE

CVE-2012-3458

CVSS score4.3 MEDIUM
EPSS probability2.47%
CISA KEVNot currently listed
Published2012-09-15
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:P/I:N/A:N

Description

Beaker before 1.6.4, when using PyCrypto to encrypt sessions, uses AES in ECB cipher mode, which might allow remote attackers to obtain portions of sensitive session data via unspecified vectors.

Primary references