Staging Environment: Content and features may be unstable or change without notice.
Advisory details: pypa / beaker/PYSEC-2012-1
Advisory ID pypa/beaker/PYSEC-2012-1
Aliases CVE-2012-3458
GHSA-39vm-p9mr-4r27
PYSEC-2012-1
Summary Beaker before 1.6.4, when using PyCrypto to encrypt sessions, uses AES in ECB cipher mode, which might allow remote attackers to obtain portions of sensitive session data via unspecified vectors.
Status Published
Exploitability 0.5
Weighted Severity 0.0
Risk
Affected and Fixed Packages Package Details
Introduced and Fixed Package Commit Patches Package Commit Patches Details
Weaknesses (0)
There are no known CWE.
System Score Found at
There are no known severity scores.
Reference id Reference type URL
https://bugzilla.redhat.com/show_bug.cgi?id=809267
http://secunia.com/advisories/50226
http://secunia.com/advisories/50520
https://github.com/bbangert/beaker/commit/91becae76101cf87ce8cbfabe3af2622fc328fe5
http://www.debian.org/security/2012/dsa-2541
http://www.openwall.com/lists/oss-security/2012/08/13/10
GHSA-39vm-p9mr-4r27 https://github.com/advisories/GHSA-39vm-p9mr-4r27
No exploits are available.

No EPSS data available for this advisory.

Patch URL
There are no known patches.
There are no known vectors.

There are no SSVC decisions available.