CVE:CVE-2012-2734
CNNVD:CNNVD-201209-721
Red Hat Enterprise MRG是美国红帽（Red Hat）公司的一款可提供高速/低时延的开放标准应用消息的服务。
Red Hat Enterprise MRG 2.0存在跨站请求伪造漏洞。远程攻击者利用该漏洞劫持任意用户的身份验证信息，从而执行任意命令。
solution:Upgrade trevor_mckay cumin to a higher version than 0.1.5192-4,0.1.3160-1,0.1.4369-1,0.1.4410-2,0.1.4494-1,0.1.4794-1,0.1.4916-1,0.1.5033-1,0.1.5037-1,0.1.5054-1,0.1.5068-1,0.1.5092-1,0.1.5098-2,0.1.5105-1,0.1.5137-1,0.1.5137-2,0.1.5137-3,0.1.5137-4,0.1.5137-5,0.1.5192-1,and avoid the version (,0.1.5192-4],0.1.3160-1,0.1.4369-1,0.1.4410-2,0.1.4494-1,0.1.4794-1,0.1.4916-1,0.1.5033-1,0.1.5037-1,0.1.5054-1,0.1.5068-1,0.1.5092-1,0.1.5098-2,0.1.5105-1,0.1.5137-1,0.1.5137-2,0.1.5137-3,0.1.5137-4,0.1.5137-5,0.1.5192-1; Upgrade redhat enterprise_mrg to a higher version than 2.0,and avoid the version 2.0