CVE-2012-4731

Опубликовано: 11 нояб. 2012

Источник: nvd

CVSS2: 4

EPSS Низкий

Описание

FAQ manager for Request Tracker (RTFM) before 2.4.5 does not properly check user rights, which allows remote authenticated users to create arbitrary articles in arbitrary classes via unknown vectors.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:bestpractical:rtfm:*:*:*:*:*:*:*:*

Версия до 2.4.3 (включая)

cpe:2.3:a:bestpractical:rtfm:2.2.0:*:*:*:*:*:*:*

cpe:2.3:a:bestpractical:rtfm:2.2.1:*:*:*:*:*:*:*

cpe:2.3:a:bestpractical:rtfm:2.2.2:*:*:*:*:*:*:*

cpe:2.3:a:bestpractical:rtfm:2.4.0:*:*:*:*:*:*:*

cpe:2.3:a:bestpractical:rtfm:2.4.1:*:*:*:*:*:*:*

cpe:2.3:a:bestpractical:rtfm:2.4.2:*:*:*:*:*:*:*

EPSS

Процентиль: 53%

0.00306

Низкий

4 Medium

CVSS2

Дефекты

CWE-264

Связанные уязвимости

CVE-2012-4731

ubuntu

около 13 лет назад

FAQ manager for Request Tracker (RTFM) before 2.4.5 does not properly check user rights, which allows remote authenticated users to create arbitrary articles in arbitrary classes via unknown vectors.

CVE-2012-4731

debian

около 13 лет назад

FAQ manager for Request Tracker (RTFM) before 2.4.5 does not properly ...

GHSA-8fxh-jgx8-hfm7

github

больше 3 лет назад

FAQ manager for Request Tracker (RTFM) before 2.4.5 does not properly check user rights, which allows remote authenticated users to create arbitrary articles in arbitrary classes via unknown vectors.

EPSS

Процентиль: 53%

0.00306

Низкий

4 Medium

CVSS2

Дефекты

CWE-264