Lucene search
HistoryNov 11, 2012 - 1:00 p.m.
CVE-2012-4731
CVSS2
4
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:S/C:N/I:P/A:N
AI Score
6.2
Confidence
Low
EPSS
0.003
Percentile
69.3%
FAQ manager for Request Tracker (RTFM) before 2.4.5 does not properly check user rights, which allows remote authenticated users to create arbitrary articles in arbitrary classes via unknown vectors.
Affected configurations
Node
bestpracticalrtfmRange≤2.4.3
ORbestpracticalrtfmMatch2.2.0
ORbestpracticalrtfmMatch2.2.1
ORbestpracticalrtfmMatch2.2.2
ORbestpracticalrtfmMatch2.4.0
ORbestpracticalrtfmMatch2.4.1
ORbestpracticalrtfmMatch2.4.2
| Vendor | Product | Version | CPE |
|---|---|---|---|
| bestpractical | rtfm | * | cpe:2.3:a:bestpractical:rtfm:*:*:*:*:*:*:*:* |
| bestpractical | rtfm | 2.2.0 | cpe:2.3:a:bestpractical:rtfm:2.2.0:*:*:*:*:*:*:* |
| bestpractical | rtfm | 2.2.1 | cpe:2.3:a:bestpractical:rtfm:2.2.1:*:*:*:*:*:*:* |
| bestpractical | rtfm | 2.2.2 | cpe:2.3:a:bestpractical:rtfm:2.2.2:*:*:*:*:*:*:* |
| bestpractical | rtfm | 2.4.0 | cpe:2.3:a:bestpractical:rtfm:2.4.0:*:*:*:*:*:*:* |
| bestpractical | rtfm | 2.4.1 | cpe:2.3:a:bestpractical:rtfm:2.4.1:*:*:*:*:*:*:* |
| bestpractical | rtfm | 2.4.2 | cpe:2.3:a:bestpractical:rtfm:2.4.2:*:*:*:*:*:*:* |
Related
ubuntucve
ubuntucve
CVE-2012-4731
2012-11-11 00:00:00
debiancve
debiancve
CVE-2012-4731
2012-11-11 13:00:59
debian
debian
[SECURITY] [DSA 2568-1] rtfm security update
2012-10-26 20:28:34
openvas
openvas
Debian Security Advisory DSA 2568-1 (rtfm)
2012-11-16 00:00:00
Debian: Security Advisory (DSA-2568-1)
2012-11-16 00:00:00
FreeBSD Ports: rt40
2012-11-26 00:00:00
osv
osv
rtfm - privilege escalation
2012-10-26 00:00:00
prion
prion
Cross site request forgery (csrf)
2012-11-11 13:00:00
cve
cve
CVE-2012-4731
2012-11-11 13:00:59
cvelist
cvelist
CVE-2012-4731
2012-11-11 11:00:00
securityvulns
securityvulns
[SECURITY] [DSA 2568-1] rtfm security update
2012-10-30 00:00:00
nessus
nessus
Debian DSA-2568-1 : rtfm - privilege escalation
2012-10-29 00:00:00
Request Tracker 3.x < 3.8.15 / 4.x < 4.0.8 Multiple Vulnerabilities
2012-11-27 00:00:00
freebsd
freebsd
RT -- Multiple Vulnerabilities
2012-10-26 00:00:00
CVSS2
4
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:S/C:N/I:P/A:N
AI Score
6.2
Confidence
Low
EPSS
0.003
Percentile
69.3%
Related for NVD:CVE-2012-4731