Lucene search
HistoryAug 23, 2013 - 4:55 p.m.
CVE-2012-4733
6 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:P/I:P/A:P
6.1 Medium
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
68.2%
Request Tracker (RT) 4.x before 4.0.13 does not properly enforce the DeleteTicket and “custom lifecycle transition” permission, which allows remote authenticated users with the ModifyTicket permission to delete tickets via unspecified vectors.
Affected configurations
Node
bestpracticalrtMatch4.0.0
ORbestpracticalrtMatch4.0.0rc1
ORbestpracticalrtMatch4.0.0rc2
ORbestpracticalrtMatch4.0.0rc3
ORbestpracticalrtMatch4.0.0rc4
ORbestpracticalrtMatch4.0.0rc5
ORbestpracticalrtMatch4.0.0rc6
ORbestpracticalrtMatch4.0.0rc7
ORbestpracticalrtMatch4.0.0rc8
ORbestpracticalrtMatch4.0.1
ORbestpracticalrtMatch4.0.1rc1
ORbestpracticalrtMatch4.0.1rc2
ORbestpracticalrtMatch4.0.2
ORbestpracticalrtMatch4.0.2rc1
ORbestpracticalrtMatch4.0.2rc2
ORbestpracticalrtMatch4.0.3
ORbestpracticalrtMatch4.0.10
ORbestpracticalrtMatch4.0.11
ORbestpracticalrtMatch4.0.12
Related
debiancve
debiancve
CVE-2012-4733
2022-10-03 16:15:35
ubuntucve
ubuntucve
CVE-2012-4733
2013-08-23 00:00:00
cve
cve
CVE-2012-4733
2022-10-03 16:15:35
cvelist
cvelist
CVE-2012-4733
2022-10-03 16:15:35
prion
prion
Cross site request forgery (csrf)
2013-08-23 16:55:00
osv
osv
request-tracker4 - several
2013-05-22 00:00:00
nessus
nessus
Debian DSA-2671-1 : request-tracker4 - several vulnerabilities
2013-05-23 00:00:00
RT: Request Tracker < 3.8.17 / 4.0.13 Multiple Vulnerabilities
2013-05-24 00:00:00
freebsd
freebsd
RT -- multiple vulnerabilities
2013-05-22 00:00:00
debian
debian
[SECURITY] [DSA 2671-1] request-tracker4 security update
2013-05-22 19:45:55
[SECURITY] [DSA 2671-1] request-tracker4 security update
2013-05-22 19:45:55
openvas
openvas
Debian: Security Advisory (DSA-2671-1)
2013-05-21 00:00:00
Mageia: Security Advisory (MGASA-2017-0325)
2022-01-28 00:00:00
mageia
mageia
Updated rt/perl-Encode packages fix security vulnerability
2017-09-03 17:31:33
6 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:P/I:P/A:P
6.1 Medium
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
68.2%
Related for NVD:CVE-2012-4733