PT-2017-16454

Name of the Vulnerable Software and Affected Versions Request Tracker RT versions 4.0.0 through 4.0.24 Request Tracker RT versions 4.2.0 through 4.2.13 Request Tracker RT versions 4.4.0 through 4.4.1 Description The issue makes it easier for remote attackers to obtain sensitive user password...

Debian Security Advisory DSA 3883-1 (rt-authen-externalauth - security update)

It was discovered that RT::Authen::ExternalAuth, an external authentication module for Request Tracker, is vulnerable to timing side-channel attacks for user passwords. Only ExternalAuth in DBI database mode is vulnerable. OpenVAS Vulnerability Test $Id: deb3883.nasl 6682 2017-07-12 09:00:18Z...

Debian Security Advisory DSA 3882-1 (request-tracker4 - security update)

Multiple vulnerabilities have been discovered in Request Tracker, an extensible trouble-ticket tracking system. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2016-6127 It was discovered that Request Tracker is vulnerable to a cross-site scripting XSS atta...

PT-2017-16776

Name of the Vulnerable Software and Affected Versions Request Tracker RT versions 4.0.0 through 4.0.24 Request Tracker RT versions 4.2.0 through 4.2.13 Request Tracker RT versions 4.4.0 through 4.4.1 Description The issue allows remote attackers to obtain sensitive information about cross-site...

PT-2017-8915

Name of the Vulnerable Software and Affected Versions Request Tracker RT versions 4.0.0 through 4.0.24 Request Tracker RT versions 4.2.0 through 4.2.13 Request Tracker RT versions 4.4.0 through 4.4.1 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web scri...

PT-2017-16777

Name of the Vulnerable Software and Affected Versions Request Tracker versions 4.0.0 through 4.0.24 Request Tracker versions 4.2.0 through 4.2.13 Request Tracker versions 4.4.0 through 4.4.1 Description The issue concerns the dashboard subscription interface in Request Tracker, which might allow...

Request Tracker Cross-Site Scripting Vulnerability (CNVD-2015-05859)

Request Tracker is Request Tracker issue tracking system for bug tracking, customer service, workflow processing, change management, web operations, youth counseling and more. A cross-site scripting vulnerability exists in versions of Request Tracker prior to 4.2.12, which allows remote attackers...

CVE-2015-6506

Cross-site scripting XSS vulnerability in the cryptography interface in Request Tracker RT before 4.2.12 allows remote attackers to inject arbitrary web script or HTML via a crafted public key...

CVE-2015-6506

Cross-site scripting XSS vulnerability in the cryptography interface in Request Tracker RT before 4.2.12 allows remote attackers to inject arbitrary web script or HTML via a crafted public key...

DEBIAN-CVE-2015-6506

Cross-site scripting XSS vulnerability in the cryptography interface in Request Tracker RT before 4.2.12 allows remote attackers to inject arbitrary web script or HTML via a crafted public key...

Cross site scripting

Cross-site scripting XSS vulnerability in the cryptography interface in Request Tracker RT before 4.2.12 allows remote attackers to inject arbitrary web script or HTML via a crafted public key...

CVE-2015-6506

Cross-site scripting XSS vulnerability in the cryptography interface in Request Tracker RT before 4.2.12 allows remote attackers to inject arbitrary web script or HTML via a crafted public key...

UBUNTU-CVE-2015-6506

Cross-site scripting XSS vulnerability in the cryptography interface in Request Tracker RT before 4.2.12 allows remote attackers to inject arbitrary web script or HTML via a crafted public key...

CVE-2015-6506

Cross-site scripting XSS vulnerability in the cryptography interface in Request Tracker RT before 4.2.12 allows remote attackers to inject arbitrary web script or HTML via a crafted public key...

CVE-2015-6506

Cross-site scripting XSS vulnerability in the cryptography interface in Request Tracker RT before 4.2.12 allows remote attackers to inject arbitrary web script or HTML via a crafted public key...

CVE-2015-6506

Cross-site scripting XSS vulnerability in the cryptography interface in Request Tracker RT before 4.2.12 allows remote attackers to inject arbitrary web script or HTML via a crafted public key...

CVE-2015-6506

Summary: CVE-2015-6506 is a cross-site scripting (XSS) vulnerability in the Request Tracker (RT) cryptography interface, exploitable via a crafted public key in RT 4.x. Affected software: Request Tracker, versions before 4.2.12 (RT 4.x

CVE-2015-6506: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the cryptography interface in Request Tracker RT before 4.2.12 allows remote attackers to inject arbitrary web script or HTML via a crafted public key...

Best Practical Solutions Request Tracker Cross-Site Scripting Vulnerability

Best Practical Solutions Request Tracker RT is an enterprise-grade, open source issue tracking system from Best Practical Solutions in the United States. The system has Bug tracking , customer service , customized workflow and other features . A cross-site scripting vulnerability exists in Best...

CVE-2015-5475

Multiple cross-site scripting XSS vulnerabilities in Request Tracker RT 4.x before 4.2.12 allow remote attackers to inject arbitrary web script or HTML via vectors related to the 1 user and 2 group rights management pages...