Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2015-1464HistoryMar 09, 2015 - 2:59 p.m.
CVE-2015-1464
2015-03-0914:59:06
Debian Security Bug Tracker
security-tracker.debian.org
13
CVSS2
6.4
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
EPSS
0.004
Percentile
72.2%
RT (aka Request Tracker) before 4.0.23 and 4.2.x before 4.2.10 allows remote attackers to hijack sessions via an RSS feed URL.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | request-tracker4 | < 4.2.8-3 | request-tracker4_4.2.8-3_all.deb |
| Debian | 11 | all | request-tracker4 | < 4.2.8-3 | request-tracker4_4.2.8-3_all.deb |
| Debian | 999 | all | request-tracker4 | < 4.2.8-3 | request-tracker4_4.2.8-3_all.deb |
| Debian | 13 | all | request-tracker4 | < 4.2.8-3 | request-tracker4_4.2.8-3_all.deb |
Related
cvelist
cvelist
CVE-2015-1464
2015-03-09 14:00:00
cve
cve
CVE-2015-1464
2015-03-09 14:59:06
ubuntucve
ubuntucve
CVE-2015-1464
2015-03-09 00:00:00
nvd
nvd
CVE-2015-1464
2015-03-09 14:59:06
prion
prion
Design/Logic Flaw
2015-03-09 14:59:00
debian
debian
[SECURITY] [DSA 3176-1] request-tracker4 security update
2015-02-26 17:00:44
[SECURITY] [DSA 3176-1] request-tracker4 security update
2015-02-26 17:00:44
[SECURITY] [DLA 158-1] request-tracker3.8 security update
2015-02-27 00:26:38
freebsd
freebsd
osv
osv
request-tracker3.8 - security update
2015-02-27 00:00:00
request-tracker4 - security update
2015-02-26 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-3176-1)
2015-02-25 00:00:00
Fedora Update for rt FEDORA-2015-4698
2015-07-07 00:00:00
Debian Security Advisory DSA 3176-1 (request-tracker4 - security update)
2015-02-26 00:00:00
securityvulns
securityvulns
[SECURITY] [DSA 3176-1] request-tracker4 security update
2015-03-23 00:00:00
fedora
fedora
[SECURITY] Fedora 22 Update: rt-4.2.10-2.fc22
2015-03-31 21:48:30
[SECURITY] Fedora 21 Update: rt-4.2.10-2.fc21
2015-04-04 07:20:34
nessus
nessus
Request Tracker 4.0.x < 4.0.23 / 4.2.x < 4.2.10 Multiple Vulnerabilities
2015-04-29 00:00:00
Debian DSA-3176-1 : request-tracker4 - security update
2015-02-27 00:00:00
mageia
mageia
Updated rt/perl-Encode packages fix security vulnerability
2017-09-03 17:31:33
CVSS2
6.4
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
EPSS
0.004
Percentile
72.2%
Related for DEBIANCVE:CVE-2015-1464