Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2012-4730HistoryNov 11, 2012 - 1:00 p.m.
CVE-2012-4730
2012-11-1113:00:59
Debian Security Bug Tracker
security-tracker.debian.org
16
request tracker
remote authenticated users
arbitrary email headers
phishing attacks
sensitive information
unix
CVSS2
3.5
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:S/C:P/I:N/A:N
EPSS
0.001
Percentile
46.1%
Request Tracker (RT) 3.8.x before 3.8.15 and 4.0.x before 4.0.8 allows remote authenticated users with ModifySelf or AdminUser privileges to inject arbitrary email headers and conduct phishing attacks or obtain sensitive information via unknown vectors.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | request-tracker4 | < 4.0.7-2 | request-tracker4_4.0.7-2_all.deb |
| Debian | 11 | all | request-tracker4 | < 4.0.7-2 | request-tracker4_4.0.7-2_all.deb |
| Debian | 999 | all | request-tracker4 | < 4.0.7-2 | request-tracker4_4.0.7-2_all.deb |
| Debian | 13 | all | request-tracker4 | < 4.0.7-2 | request-tracker4_4.0.7-2_all.deb |
Related
prion
prion
Cross site request forgery (csrf)
2012-11-11 13:00:00
cvelist
cvelist
CVE-2012-4730
2012-11-11 11:00:00
cve
cve
CVE-2012-4730
2012-11-11 13:00:59
nvd
nvd
CVE-2012-4730
2012-11-11 13:00:59
ubuntucve
ubuntucve
CVE-2012-4730
2012-11-11 00:00:00
fedora
fedora
[SECURITY] Fedora 18 Update: rt3-3.8.15-1.fc18
2012-11-08 05:43:51
[SECURITY] Fedora 17 Update: rt3-3.8.15-1.fc17
2012-11-08 01:55:15
[SECURITY] Fedora 16 Update: rt3-3.8.15-1.fc16
2012-11-08 01:53:54
openvas
openvas
Debian Security Advisory DSA 2567-1 (request-tracker3.8)
2012-10-29 00:00:00
Fedora Update for rt3 FEDORA-2012-17218
2012-11-09 00:00:00
Fedora Update for rt3 FEDORA-2012-17174
2012-11-09 00:00:00
debian
debian
[SECURITY] [DSA 2567-1] request-tracker3.8 security update
2012-10-26 20:12:00
securityvulns
securityvulns
[SECURITY] [DSA 2567-1] request-tracker3.8 security update
2012-10-30 00:00:00
freebsd
freebsd
RT -- Multiple Vulnerabilities
2012-10-26 00:00:00
osv
osv
request-tracker3.8 - several
2012-10-26 00:00:00
nessus
nessus
Debian DSA-2567-1 : request-tracker3.8 - several vulnerabilities
2012-10-29 00:00:00
Fedora 18 : rt3-3.8.15-1.fc18 (2012-17143)
2012-11-08 00:00:00
Fedora 16 : rt3-3.8.15-1.fc16 (2012-17218)
2012-11-08 00:00:00
CVSS2
3.5
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:S/C:P/I:N/A:N
EPSS
0.001
Percentile
46.1%
Related for DEBIANCVE:CVE-2012-4730