Lucene search
+L

2 matches found

Mageia
Mageia
added 2017/09/03 2:31 p.m.51 views

Updated rt/perl-Encode packages fix security vulnerability

RT 4.0.0 and above are vulnerable to a limited privilege escalation leading to unauthorized modification of ticket data. The DeleteTicket right and any custom lifecycle transition rights may be bypassed by any user with ModifyTicket CVE-2012-4733. RT 3.8.0 and above include a version of bin/rt th...

8.8CVSS9.2AI score0.02825EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2017/07/03 4:29 p.m.29 views

CVE-2017-5943

Request Tracker RT 4.x before 4.0.25, 4.2.x before 4.2.14, and 4.4.x before 4.4.2 allows remote attackers to obtain sensitive information about cross-site request forgery CSRF verification tokens via a crafted URL...

8.8CVSS7.2AI score0.00835EPSS
SaveExploits0References1
Rows per page
Query Builder