CVE-2012-4731

2012-11-1113:00:59

Debian Security Bug Tracker

security-tracker.debian.org

cve-2012-4731

security

request tracker

user rights

remote

authentication

arbitrary articles

classes

unix

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

EPSS

0.003

Percentile

69.3%

JSON

FAQ manager for Request Tracker (RTFM) before 2.4.5 does not properly check user rights, which allows remote authenticated users to create arbitrary articles in arbitrary classes via unknown vectors.

OSVersionArchitecturePackageVersionFilename
Debian12allrequest-tracker4< 4.0.7-2request-tracker4_4.0.7-2_all.deb
Debian11allrequest-tracker4< 4.0.7-2request-tracker4_4.0.7-2_all.deb
Debian999allrequest-tracker4< 4.0.7-2request-tracker4_4.0.7-2_all.deb
Debian13allrequest-tracker4< 4.0.7-2request-tracker4_4.0.7-2_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	request-tracker4	< 4.0.7-2	request-tracker4_4.0.7-2_all.deb
Debian	11	all	request-tracker4	< 4.0.7-2	request-tracker4_4.0.7-2_all.deb
Debian	999	all	request-tracker4	< 4.0.7-2	request-tracker4_4.0.7-2_all.deb
Debian	13	all	request-tracker4	< 4.0.7-2	request-tracker4_4.0.7-2_all.deb