CVE-2012-3458
python beaker: no CVSS score yet. EPSS 2.5% chance of exploitation in the next 30 days. Fixed in beaker 1.6.4, 1.6.5.post1.
Beaker before 1.6.4, when using PyCrypto to encrypt sessions, uses AES in ECB cipher mode, which might allow remote attackers to obtain portions of sensitive session data via unspecified vectors.
- EPSS
- 2.5% chance of exploitation in the next 30 days; higher than 84% of CVEs (scores of 2026-10-31)
- CWE
- CWE-310
- Published
- Modified
- Record from
- the NVD, synced
Affected
- python:beaker
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-39vm-p9mr-4r27 | PyPI | beaker | <1.6.4 | 1.6.4 |
| PYSEC-2012-1 | PyPI | beaker | <1.6.5.post1 | 1.6.5.post1 |