Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2012-4733HistoryAug 23, 2013 - 4:55 p.m.
CVE-2012-4733
2013-08-2316:55:06
Debian Security Bug Tracker
security-tracker.debian.org
15
request tracker
rt 4.x
vulnerability
deleteticket
custom lifecycle transition
remote authenticated users
modifyticket
delete tickets
unspecified vectors
unix
CVSS2
6
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:P/I:P/A:P
EPSS
0.003
Percentile
71.4%
Request Tracker (RT) 4.x before 4.0.13 does not properly enforce the DeleteTicket and “custom lifecycle transition” permission, which allows remote authenticated users with the ModifyTicket permission to delete tickets via unspecified vectors.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | request-tracker4 | < 4.0.12-2 | request-tracker4_4.0.12-2_all.deb |
| Debian | 11 | all | request-tracker4 | < 4.0.12-2 | request-tracker4_4.0.12-2_all.deb |
| Debian | 999 | all | request-tracker4 | < 4.0.12-2 | request-tracker4_4.0.12-2_all.deb |
| Debian | 13 | all | request-tracker4 | < 4.0.12-2 | request-tracker4_4.0.12-2_all.deb |
Related
ubuntucve
ubuntucve
CVE-2012-4733
2013-08-23 00:00:00
cvelist
cvelist
CVE-2012-4733
2013-08-23 16:00:00
cve
cve
CVE-2012-4733
2013-08-23 16:55:06
nvd
nvd
CVE-2012-4733
2013-08-23 16:55:06
prion
prion
Cross site request forgery (csrf)
2013-08-23 16:55:00
nessus
nessus
Debian DSA-2671-1 : request-tracker4 - several vulnerabilities
2013-05-23 00:00:00
RT: Request Tracker < 3.8.17 / 4.0.13 Multiple Vulnerabilities
2013-05-24 00:00:00
freebsd
freebsd
RT -- multiple vulnerabilities
2013-05-22 00:00:00
debian
debian
[SECURITY] [DSA 2671-1] request-tracker4 security update
2013-05-22 19:45:55
[SECURITY] [DSA 2671-1] request-tracker4 security update
2013-05-22 19:45:55
osv
osv
request-tracker4 - several
2013-05-22 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-2671-1)
2013-05-21 00:00:00
Mageia: Security Advisory (MGASA-2017-0325)
2022-01-28 00:00:00
mageia
mageia
Updated rt/perl-Encode packages fix security vulnerability
2017-09-03 17:31:33
CVSS2
6
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:P/I:P/A:P
EPSS
0.003
Percentile
71.4%
Related for DEBIANCVE:CVE-2012-4733