CVE-2012-2770

The Authen::ExternalAuth extension before 0.11 for Best Practical Solutions RT allows remote attackers to obtain a logged-in session via unspecified vectors related to the "URL of a RSS feed of the user."...

PT-2012-4246

Name of the Vulnerable Software and Affected Versions Authen::ExternalAuth extension versions prior to 0.11 Description The issue allows remote attackers to obtain a logged-in session via unspecified vectors related to the "URL of a RSS feed of the user." Recommendations For versions prior to 0.1...