Lucene search

K
cvelistMitreCVELIST:CVE-2012-4733
HistoryOct 03, 2022 - 4:15 p.m.

CVE-2012-4733

2022-10-0316:15:35
mitre
www.cve.org
1
request tracker
rt 4.x
deleteticket
custom lifecycle transition
remote authenticated users
modifyticket
vulnerability

8.2 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.2%

Request Tracker (RT) 4.x before 4.0.13 does not properly enforce the DeleteTicket and “custom lifecycle transition” permission, which allows remote authenticated users with the ModifyTicket permission to delete tickets via unspecified vectors.

8.2 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.2%