Lucene search
HistoryJul 24, 2013 - 12:01 p.m.
CVE-2012-6578
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
6.5 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
45.1%
Best Practical Solutions RT 3.8.x before 3.8.15 and 4.0.x before 4.0.8, when GnuPG is enabled with a “Sign by default” queue configuration, uses a queue’s key for signing, which might allow remote attackers to spoof messages by leveraging the lack of authentication semantics.
Affected configurations
Node
bestpracticalrequest_trackerMatch3.8.3
ORbestpracticalrequest_trackerMatch3.8.4
ORbestpracticalrequest_trackerMatch3.8.7
ORbestpracticalrequest_trackerMatch3.8.9
ORbestpracticalrequest_trackerMatch3.8.10
ORbestpracticalrequest_trackerMatch3.8.11
ORbestpracticalrequest_trackerMatch3.8.12
ORbestpracticalrequest_trackerMatch3.8.13
ORbestpracticalrequest_trackerMatch3.8.14
Node
bestpracticalrequest_trackerMatch4.0.0
ORbestpracticalrequest_trackerMatch4.0.1
ORbestpracticalrequest_trackerMatch4.0.2
ORbestpracticalrequest_trackerMatch4.0.3
ORbestpracticalrequest_trackerMatch4.0.4
ORbestpracticalrequest_trackerMatch4.0.5
ORbestpracticalrequest_trackerMatch4.0.6
ORbestpracticalrequest_trackerMatch4.0.7
Related
cve
cve
CVE-2012-6578
2022-10-03 16:15:28
CVE-2012-4735
2022-10-03 16:15:34
cvelist
cvelist
CVE-2012-6578
2022-10-03 16:15:28
prion
prion
Default configuration
2013-07-24 12:01:00
debiancve
debiancve
CVE-2012-6578
2022-10-03 16:15:28
ubuntucve
ubuntucve
CVE-2012-6578
2013-07-24 00:00:00
nvd
nvd
CVE-2012-4735
2013-07-24 12:01:44
osv
osv
request-tracker3.8 - several
2012-10-26 00:00:00
nessus
nessus
Debian DSA-2567-1 : request-tracker3.8 - several vulnerabilities
2012-10-29 00:00:00
Fedora 18 : rt3-3.8.15-1.fc18 (2012-17143)
2012-11-08 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-2567-1)
2012-10-29 00:00:00
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
6.5 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
45.1%
Related for NVD:CVE-2012-6578