Lucene search
MitreCVE-2012-4732HistoryNov 11, 2012 - 1:00 p.m.
CVE-2012-4732
2012-11-1113:00:59
CWE-352
mitre
web.nvd.nist.gov
34
cve-2012-4732
csrf
cross-site request forgery
vulnerability
request tracker
rt 3.8.12
nvd
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
6.9
Confidence
Low
EPSS
0.001
Percentile
39.2%
Cross-site request forgery (CSRF) vulnerability in Request Tracker (RT) 3.8.12 and other versions before 3.8.15, and 4.0.6 and other versions before 4.0.8, allows remote attackers to hijack the authentication of users for requests that toggle ticket bookmarks.
Affected configurations
Node
bestpracticalrtMatch3.8.12
ORbestpracticalrtMatch3.8.13
ORbestpracticalrtMatch3.8.13rc1
ORbestpracticalrtMatch3.8.13rc2
ORbestpracticalrtMatch3.8.14
ORbestpracticalrtMatch3.8.14rc1
Node
bestpracticalrtMatch4.0.6
ORbestpracticalrtMatch4.0.7rc1
ORbestpracticalrtMatch4.0.8rc1
ORbestpracticalrtMatch4.0.8rc2
| Vendor | Product | Version | CPE |
|---|---|---|---|
| bestpractical | rt | 3.8.12 | cpe:2.3:a:bestpractical:rt:3.8.12:*:*:*:*:*:*:* |
| bestpractical | rt | 3.8.13 | cpe:2.3:a:bestpractical:rt:3.8.13:*:*:*:*:*:*:* |
| bestpractical | rt | 3.8.13 | cpe:2.3:a:bestpractical:rt:3.8.13:rc1:*:*:*:*:*:* |
| bestpractical | rt | 3.8.13 | cpe:2.3:a:bestpractical:rt:3.8.13:rc2:*:*:*:*:*:* |
| bestpractical | rt | 3.8.14 | cpe:2.3:a:bestpractical:rt:3.8.14:*:*:*:*:*:*:* |
| bestpractical | rt | 3.8.14 | cpe:2.3:a:bestpractical:rt:3.8.14:rc1:*:*:*:*:*:* |
| bestpractical | rt | 4.0.6 | cpe:2.3:a:bestpractical:rt:4.0.6:*:*:*:*:*:*:* |
| bestpractical | rt | 4.0.7 | cpe:2.3:a:bestpractical:rt:4.0.7:rc1:*:*:*:*:*:* |
| bestpractical | rt | 4.0.8 | cpe:2.3:a:bestpractical:rt:4.0.8:rc1:*:*:*:*:*:* |
| bestpractical | rt | 4.0.8 | cpe:2.3:a:bestpractical:rt:4.0.8:rc2:*:*:*:*:*:* |
Related
ubuntucve
ubuntucve
CVE-2012-4732
2012-11-11 00:00:00
cvelist
cvelist
CVE-2012-4732
2012-11-11 11:00:00
debiancve
debiancve
CVE-2012-4732
2012-11-11 13:00:59
prion
prion
Cross site request forgery (csrf)
2012-11-11 13:00:00
nvd
nvd
CVE-2012-4732
2012-11-11 13:00:59
fedora
fedora
[SECURITY] Fedora 18 Update: rt3-3.8.15-1.fc18
2012-11-08 05:43:51
[SECURITY] Fedora 17 Update: rt3-3.8.15-1.fc17
2012-11-08 01:55:15
[SECURITY] Fedora 16 Update: rt3-3.8.15-1.fc16
2012-11-08 01:53:54
debian
debian
[SECURITY] [DSA 2567-1] request-tracker3.8 security update
2012-10-26 20:12:00
openvas
openvas
Fedora Update for rt3 FEDORA-2012-17174
2012-11-09 00:00:00
Fedora Update for rt3 FEDORA-2012-17218
2012-11-09 00:00:00
Debian Security Advisory DSA 2567-1 (request-tracker3.8)
2012-10-29 00:00:00
securityvulns
securityvulns
[SECURITY] [DSA 2567-1] request-tracker3.8 security update
2012-10-30 00:00:00
freebsd
freebsd
RT -- Multiple Vulnerabilities
2012-10-26 00:00:00
osv
osv
request-tracker3.8 - several
2012-10-26 00:00:00
nessus
nessus
Debian DSA-2567-1 : request-tracker3.8 - several vulnerabilities
2012-10-29 00:00:00
Fedora 18 : rt3-3.8.15-1.fc18 (2012-17143)
2012-11-08 00:00:00
Fedora 16 : rt3-3.8.15-1.fc16 (2012-17218)
2012-11-08 00:00:00
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
6.9
Confidence
Low
EPSS
0.001
Percentile
39.2%
Related for CVE-2012-4732