CVE-2013-3737

2014-11-1602:00:00

mitre

www.cve.org

AI Score

6.9

Confidence

Low

EPSS

0.003

Percentile

71.1%

JSON

The MobileUI (aka RT-Extension-MobileUI) extension before 1.04 in Request Tracker (RT) 4.0.0 before 4.0.13, when using the file-based session store (Apache::Session::File) and certain authentication extensions, allows remote attackers to reuse unauthorized sessions and obtain user preferences and caches via unspecified vectors.