CVE-2012-3359

CVE-2012-3359 describes a vulnerability in Luci within Red Hat Conga and Red Hat Enterprise Linux where user credentials (username and password) are stored as a Base64 encoded string in the __ac session cookie. This allows an attacker with local access to the system to potentially gain privileges by accessing this cookie. The vulnerability has a CVSS score of 3.7, indicating low severity, with an attack vector requiring local access and high attack complexity, leading to partial confidentiality, integrity, and availability impacts. There is no known exploit intelligence, such as Metasploit modules or ExploitDB entries, and the vulnerability has received no community discussion or media coverage, suggesting a low likelihood of active exploitation.