CVE-2012-4733

Опубликовано: 23 авг. 2013

Источник: nvd

CVSS2: 6

EPSS Низкий

Описание

Request Tracker (RT) 4.x before 4.0.13 does not properly enforce the DeleteTicket and "custom lifecycle transition" permission, which allows remote authenticated users with the ModifyTicket permission to delete tickets via unspecified vectors.

Ссылки

http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000226.html
Vendor Advisory
http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000227.html
Patch
http://secunia.com/advisories/53522
Vendor Advisory
http://www.osvdb.org/93611
http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000226.html
Vendor Advisory
http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000227.html
Patch
http://secunia.com/advisories/53522
Vendor Advisory
http://www.osvdb.org/93611

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:bestpractical:rt:4.0.0:*:*:*:*:*:*:*

cpe:2.3:a:bestpractical:rt:4.0.0:rc1:*:*:*:*:*:*

cpe:2.3:a:bestpractical:rt:4.0.0:rc2:*:*:*:*:*:*

cpe:2.3:a:bestpractical:rt:4.0.0:rc3:*:*:*:*:*:*

cpe:2.3:a:bestpractical:rt:4.0.0:rc4:*:*:*:*:*:*

cpe:2.3:a:bestpractical:rt:4.0.0:rc5:*:*:*:*:*:*

cpe:2.3:a:bestpractical:rt:4.0.0:rc6:*:*:*:*:*:*

cpe:2.3:a:bestpractical:rt:4.0.0:rc7:*:*:*:*:*:*

cpe:2.3:a:bestpractical:rt:4.0.0:rc8:*:*:*:*:*:*

cpe:2.3:a:bestpractical:rt:4.0.1:*:*:*:*:*:*:*

cpe:2.3:a:bestpractical:rt:4.0.1:rc1:*:*:*:*:*:*

cpe:2.3:a:bestpractical:rt:4.0.1:rc2:*:*:*:*:*:*

cpe:2.3:a:bestpractical:rt:4.0.2:*:*:*:*:*:*:*

cpe:2.3:a:bestpractical:rt:4.0.2:rc1:*:*:*:*:*:*

cpe:2.3:a:bestpractical:rt:4.0.2:rc2:*:*:*:*:*:*

cpe:2.3:a:bestpractical:rt:4.0.3:*:*:*:*:*:*:*

cpe:2.3:a:bestpractical:rt:4.0.10:*:*:*:*:*:*:*

cpe:2.3:a:bestpractical:rt:4.0.11:*:*:*:*:*:*:*

cpe:2.3:a:bestpractical:rt:4.0.12:*:*:*:*:*:*:*

EPSS

Процентиль: 68%

0.00567

Низкий

6 Medium

CVSS2

Дефекты

CWE-255

Связанные уязвимости

CVE-2012-4733

ubuntu

больше 12 лет назад

CVE-2012-4733

debian

больше 12 лет назад

Request Tracker (RT) 4.x before 4.0.13 does not properly enforce the D ...

GHSA-3f39-v4r2-mjqq

github

больше 3 лет назад

EPSS

Процентиль: 68%

0.00567

Низкий

6 Medium

CVSS2

Дефекты

CWE-255