Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2015-1165
HistoryMar 09, 2015 - 2:59 p.m.

CVE-2015-1165

2015-03-0914:59:05
CWE-200
mitre
web.nvd.nist.gov
40
cve-2015-1165
request tracker
remote attack
rss feed
ticket data
vulnerability
nvd

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

8.2

Confidence

High

EPSS

0.004

Percentile

73.5%

JSON

RT (aka Request Tracker) 3.8.8 through 4.x before 4.0.23 and 4.2.x before 4.2.10 allows remote attackers to obtain sensitive RSS feed URLs and ticket data via unspecified vectors.

Affected configurations

Nvd
Node
debiandebian_linuxMatch7.0
OR
fedoraprojectfedoraMatch21
OR
fedoraprojectfedoraMatch22
Node
bestpracticalrequest_trackerMatch3.8.8
OR
bestpracticalrequest_trackerMatch3.8.9
OR
bestpracticalrequest_trackerMatch3.8.10
OR
bestpracticalrequest_trackerMatch3.8.11
OR
bestpracticalrequest_trackerMatch3.8.12
OR
bestpracticalrequest_trackerMatch3.8.13
OR
bestpracticalrequest_trackerMatch3.8.14
OR
bestpracticalrequest_trackerMatch3.8.15
OR
bestpracticalrequest_trackerMatch3.8.16
OR
bestpracticalrequest_trackerMatch3.8.17
OR
bestpracticalrequest_trackerMatch4.0.0
OR
bestpracticalrequest_trackerMatch4.0.1
OR
bestpracticalrequest_trackerMatch4.0.2
OR
bestpracticalrequest_trackerMatch4.0.3
OR
bestpracticalrequest_trackerMatch4.0.4
OR
bestpracticalrequest_trackerMatch4.0.5
OR
bestpracticalrequest_trackerMatch4.0.6
OR
bestpracticalrequest_trackerMatch4.0.7
OR
bestpracticalrequest_trackerMatch4.0.8
OR
bestpracticalrequest_trackerMatch4.0.9
OR
bestpracticalrequest_trackerMatch4.0.10
OR
bestpracticalrequest_trackerMatch4.0.11
OR
bestpracticalrequest_trackerMatch4.0.12
OR
bestpracticalrequest_trackerMatch4.0.13
OR
bestpracticalrequest_trackerMatch4.0.14
OR
bestpracticalrequest_trackerMatch4.0.15
OR
bestpracticalrequest_trackerMatch4.0.16
OR
bestpracticalrequest_trackerMatch4.0.17
OR
bestpracticalrequest_trackerMatch4.0.18
OR
bestpracticalrequest_trackerMatch4.0.19
OR
bestpracticalrequest_trackerMatch4.0.20
OR
bestpracticalrequest_trackerMatch4.0.21
OR
bestpracticalrequest_trackerMatch4.0.22
OR
bestpracticalrequest_trackerMatch4.2.0
OR
bestpracticalrequest_trackerMatch4.2.1
OR
bestpracticalrequest_trackerMatch4.2.2
OR
bestpracticalrequest_trackerMatch4.2.3
OR
bestpracticalrequest_trackerMatch4.2.4
OR
bestpracticalrequest_trackerMatch4.2.5
OR
bestpracticalrequest_trackerMatch4.2.6
OR
bestpracticalrequest_trackerMatch4.2.7
OR
bestpracticalrequest_trackerMatch4.2.8
OR
bestpracticalrequest_trackerMatch4.2.9
VendorProductVersionCPE
debiandebian_linux7.0cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
fedoraprojectfedora21cpe:2.3:o:fedoraproject:fedora:21:*:*:*:*:*:*:*
fedoraprojectfedora22cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*
bestpracticalrequest_tracker3.8.8cpe:2.3:a:bestpractical:request_tracker:3.8.8:*:*:*:*:*:*:*
bestpracticalrequest_tracker3.8.9cpe:2.3:a:bestpractical:request_tracker:3.8.9:*:*:*:*:*:*:*
bestpracticalrequest_tracker3.8.10cpe:2.3:a:bestpractical:request_tracker:3.8.10:*:*:*:*:*:*:*
bestpracticalrequest_tracker3.8.11cpe:2.3:a:bestpractical:request_tracker:3.8.11:*:*:*:*:*:*:*
bestpracticalrequest_tracker3.8.12cpe:2.3:a:bestpractical:request_tracker:3.8.12:*:*:*:*:*:*:*
bestpracticalrequest_tracker3.8.13cpe:2.3:a:bestpractical:request_tracker:3.8.13:*:*:*:*:*:*:*
bestpracticalrequest_tracker3.8.14cpe:2.3:a:bestpractical:request_tracker:3.8.14:*:*:*:*:*:*:*
Rows per page:
1-10 of 461

Related

ubuntucve 1
nvd 1
debiancve 1
cvelist 1
prion 1
debian 3
freebsd 1
osv 2
openvas 6
nessus 6
securityvulns 2
fedora 2
mageia 1
ubuntucve
ubuntucve
CVE-2015-1165
2015-03-09 00:00:00
nvd
nvd
CVE-2015-1165
2015-03-09 14:59:05
debiancve
debiancve
CVE-2015-1165
2015-03-09 14:59:05
cvelist
cvelist
CVE-2015-1165
2015-03-09 14:00:00
prion
prion
Design/Logic Flaw
2015-03-09 14:59:00
debian
debian
[SECURITY] [DSA 3176-1] request-tracker4 security update
2015-02-26 17:00:44
[SECURITY] [DLA 158-1] request-tracker3.8 security update
2015-02-27 00:26:38
[SECURITY] [DSA 3176-1] request-tracker4 security update
2015-02-26 17:00:44
freebsd
freebsd
rt -- Remote DoS, Information disclosure and Session Hijackingvulnerabilities
2015-02-26 00:00:00
osv
osv
request-tracker3.8 - security update
2015-02-27 00:00:00
request-tracker4 - security update
2015-02-26 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-3176-1)
2015-02-25 00:00:00
Fedora Update for rt FEDORA-2015-4698
2015-07-07 00:00:00
Fedora Update for rt FEDORA-2015-4666
2015-04-05 00:00:00
nessus
nessus
Request Tracker 4.0.x < 4.0.23 / 4.2.x < 4.2.10 Multiple Vulnerabilities
2015-04-29 00:00:00
Debian DSA-3176-1 : request-tracker4 - security update
2015-02-27 00:00:00
FreeBSD : rt -- Remote DoS, Information disclosure and Session Hijackingvulnerabilities (d08f6002-c588-11e4-8495-6805ca0b3d42)
2015-03-09 00:00:00
securityvulns
securityvulns
[SECURITY] [DSA 3176-1] request-tracker4 security update
2015-03-23 00:00:00
Web applications security vulnerabilities summary &#40;PHP, ASP, JSP, CGI, Perl&#41;
2015-03-23 00:00:00
fedora
fedora
[SECURITY] Fedora 22 Update: rt-4.2.10-2.fc22
2015-03-31 21:48:30
[SECURITY] Fedora 21 Update: rt-4.2.10-2.fc21
2015-04-04 07:20:34
mageia
mageia
Updated rt/perl-Encode packages fix security vulnerability
2017-09-03 17:31:33

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

8.2

Confidence

High

EPSS

0.004

Percentile

73.5%

JSON
Related for CVE-2015-1165
ubuntucve1nvd1debiancve1cvelist1prion1debian3freebsd1osv2openvas6nessus6securityvulns2fedora2mageia1