Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3f39-v4r2-mjqq

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Request Tracker (RT) 4.x before 4.0.13 does not properly enforce the DeleteTicket and "custom lifecycle transition" permission, which allows remote authenticated users with the ModifyTicket permission to delete tickets via unspecified vectors.

Request Tracker (RT) 4.x before 4.0.13 does not properly enforce the DeleteTicket and "custom lifecycle transition" permission, which allows remote authenticated users with the ModifyTicket permission to delete tickets via unspecified vectors.

EPSS

Процентиль: 68%
0.00567
Низкий

Связанные уязвимости

ubuntu
больше 12 лет назад

Request Tracker (RT) 4.x before 4.0.13 does not properly enforce the DeleteTicket and "custom lifecycle transition" permission, which allows remote authenticated users with the ModifyTicket permission to delete tickets via unspecified vectors.

nvd
больше 12 лет назад

Request Tracker (RT) 4.x before 4.0.13 does not properly enforce the DeleteTicket and "custom lifecycle transition" permission, which allows remote authenticated users with the ModifyTicket permission to delete tickets via unspecified vectors.

debian
больше 12 лет назад

Request Tracker (RT) 4.x before 4.0.13 does not properly enforce the D ...

EPSS

Процентиль: 68%
0.00567
Низкий