CVE:CVE-2012-2684
CNNVD:CNNVD-201209-719
Red Hat Enterprise Messaging，Realtime，以及Grid (MRG) 2.0中使用的Cumin 0.1.5444之前版本中的get_sample_filters_by_signature函数中存在多个SQL注入漏洞。通过(1)agent或者(2)object id，远程攻击者可执行任意SQL命令。
solution:Upgrade trevor_mckay cumin to a higher version than 0.1.5192-4,0.1.3160-1,0.1.4369-1,0.1.4410-2,0.1.4494-1,0.1.4794-1,0.1.4916-1,0.1.5033-1,0.1.5037-1,0.1.5054-1,0.1.5068-1,0.1.5092-1,0.1.5098-2,0.1.5105-1,0.1.5137-1,0.1.5137-2,0.1.5137-3,0.1.5137-4,0.1.5137-5,0.1.5192-1,and avoid the version (,0.1.5192-4],0.1.3160-1,0.1.4369-1,0.1.4410-2,0.1.4494-1,0.1.4794-1,0.1.4916-1,0.1.5033-1,0.1.5037-1,0.1.5054-1,0.1.5068-1,0.1.5092-1,0.1.5098-2,0.1.5105-1,0.1.5137-1,0.1.5137-2,0.1.5137-3,0.1.5137-4,0.1.5137-5,0.1.5192-1; Upgrade redhat enterprise_mrg to a higher version than 2.0,and avoid the version 2.0