Lucene search
MitreCVE-2015-1464HistoryMar 09, 2015 - 2:59 p.m.
CVE-2015-1464
2015-03-0914:59:06
CWE-284
mitre
web.nvd.nist.gov
48
cve-2015-1464
rt
request tracker
session hijacking
rss feed
security vulnerability
CVSS2
6.4
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
AI Score
8.4
Confidence
High
EPSS
0.004
Percentile
72.2%
RT (aka Request Tracker) before 4.0.23 and 4.2.x before 4.2.10 allows remote attackers to hijack sessions via an RSS feed URL.
Affected configurations
Node
fedoraprojectfedoraMatch21
ORfedoraprojectfedoraMatch22
Node
bestpracticalrequest_trackerRange≤4.0.22
ORbestpracticalrequest_trackerMatch4.2.0
ORbestpracticalrequest_trackerMatch4.2.1
ORbestpracticalrequest_trackerMatch4.2.2
ORbestpracticalrequest_trackerMatch4.2.3
ORbestpracticalrequest_trackerMatch4.2.4
ORbestpracticalrequest_trackerMatch4.2.5
ORbestpracticalrequest_trackerMatch4.2.6
ORbestpracticalrequest_trackerMatch4.2.7
ORbestpracticalrequest_trackerMatch4.2.8
ORbestpracticalrequest_trackerMatch4.2.9
| Vendor | Product | Version | CPE |
|---|---|---|---|
| fedoraproject | fedora | 21 | cpe:2.3:o:fedoraproject:fedora:21:*:*:*:*:*:*:* |
| fedoraproject | fedora | 22 | cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:* |
| bestpractical | request_tracker | * | cpe:2.3:a:bestpractical:request_tracker:*:*:*:*:*:*:*:* |
| bestpractical | request_tracker | 4.2.0 | cpe:2.3:a:bestpractical:request_tracker:4.2.0:*:*:*:*:*:*:* |
| bestpractical | request_tracker | 4.2.1 | cpe:2.3:a:bestpractical:request_tracker:4.2.1:*:*:*:*:*:*:* |
| bestpractical | request_tracker | 4.2.2 | cpe:2.3:a:bestpractical:request_tracker:4.2.2:*:*:*:*:*:*:* |
| bestpractical | request_tracker | 4.2.3 | cpe:2.3:a:bestpractical:request_tracker:4.2.3:*:*:*:*:*:*:* |
| bestpractical | request_tracker | 4.2.4 | cpe:2.3:a:bestpractical:request_tracker:4.2.4:*:*:*:*:*:*:* |
| bestpractical | request_tracker | 4.2.5 | cpe:2.3:a:bestpractical:request_tracker:4.2.5:*:*:*:*:*:*:* |
| bestpractical | request_tracker | 4.2.6 | cpe:2.3:a:bestpractical:request_tracker:4.2.6:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2015-1464
2015-03-09 14:00:00
ubuntucve
ubuntucve
CVE-2015-1464
2015-03-09 00:00:00
nvd
nvd
CVE-2015-1464
2015-03-09 14:59:06
debiancve
debiancve
CVE-2015-1464
2015-03-09 14:59:06
prion
prion
Design/Logic Flaw
2015-03-09 14:59:00
debian
debian
[SECURITY] [DSA 3176-1] request-tracker4 security update
2015-02-26 17:00:44
[SECURITY] [DSA 3176-1] request-tracker4 security update
2015-02-26 17:00:44
[SECURITY] [DLA 158-1] request-tracker3.8 security update
2015-02-27 00:26:38
securityvulns
securityvulns
[SECURITY] [DSA 3176-1] request-tracker4 security update
2015-03-23 00:00:00
fedora
fedora
[SECURITY] Fedora 22 Update: rt-4.2.10-2.fc22
2015-03-31 21:48:30
[SECURITY] Fedora 21 Update: rt-4.2.10-2.fc21
2015-04-04 07:20:34
osv
osv
request-tracker4 - security update
2015-02-26 00:00:00
request-tracker3.8 - security update
2015-02-27 00:00:00
openvas
openvas
Debian Security Advisory DSA 3176-1 (request-tracker4 - security update)
2015-02-26 00:00:00
Fedora Update for rt FEDORA-2015-4698
2015-07-07 00:00:00
Debian: Security Advisory (DSA-3176-1)
2015-02-25 00:00:00
freebsd
freebsd
nessus
nessus
Request Tracker 4.0.x < 4.0.23 / 4.2.x < 4.2.10 Multiple Vulnerabilities
2015-04-29 00:00:00
Debian DSA-3176-1 : request-tracker4 - security update
2015-02-27 00:00:00
mageia
mageia
Updated rt/perl-Encode packages fix security vulnerability
2017-09-03 17:31:33
CVSS2
6.4
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
AI Score
8.4
Confidence
High
EPSS
0.004
Percentile
72.2%
Related for CVE-2015-1464