CVE:CVE-2012-2681
CNNVD:CNNVD-201209-717
Red Hat Enterprise Messaging，Realtime，以及Grid (MRG) 2.0中使用的Cumin 0.1.5444之前版本中存在漏洞。该漏洞源于程序使用可预测的随机数生成会话密钥。远程攻击者可利用该漏洞轻易地推测出会话密钥。
solution:Upgrade trevor_mckay cumin to a higher version than 0.1.5192-4,0.1.3160-1,0.1.4369-1,0.1.4410-2,0.1.4494-1,0.1.4794-1,0.1.4916-1,0.1.5098-2,0.1.5192-1,and avoid the version (,0.1.5192-4],0.1.3160-1,0.1.4369-1,0.1.4410-2,0.1.4494-1,0.1.4794-1,0.1.4916-1,0.1.5098-2,0.1.5192-1; Upgrade redhat enterprise_mrg to a higher version than 2.0,and avoid the version 2.0