CVE-2012-2405

Gallery 2 before 2.3.2 and 3 before 3.0.3 does not properly implement encryption, which has unspecified impact and attack vectors, a different vulnerability than CVE-2012-1113.

Score

CVSS 2.0 10.0 Critical

Status

Modified - cve@mitre.org

Published

2012-04-22

Last modified

2024-08-06

Weaknesses

CWE-310

Affected products

• Gallery (Maian)
• Gallery (Menalto)

References

• http://gallery.menalto.com/gallery_3_0_3_and_gallery_2_3_2
• https://bugzilla.redhat.com/show_bug.cgi?id=812045
• https://exchange.xforce.ibmcloud.com/vulnerabilities/75201