Lucene search
K

8 matches found

NVD
NVD
added 2013/08/23 4:55 p.m.14 views

CVE-2012-4733

Request Tracker RT 4.x before 4.0.13 does not properly enforce the DeleteTicket and "custom lifecycle transition" permission, which allows remote authenticated users with the ModifyTicket permission to delete tickets via unspecified vectors...

6CVSS6.1AI score0.00567EPSS
Exploits0References4
Prion
Prion
added 2013/08/23 4:55 p.m.13 views

Cross site request forgery (csrf)

Request Tracker RT 4.x before 4.0.13 does not properly enforce the DeleteTicket and "custom lifecycle transition" permission, which allows remote authenticated users with the ModifyTicket permission to delete tickets via unspecified vectors...

6CVSS6.6AI score0.00567EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2013/08/23 4:55 p.m.1 views

UBUNTU-CVE-2012-4733

Request Tracker RT 4.x before 4.0.13 does not properly enforce the DeleteTicket and "custom lifecycle transition" permission, which allows remote authenticated users with the ModifyTicket permission to delete tickets via unspecified vectors...

6CVSS7.3AI score0.00567EPSS
Exploits0References2
UbuntuCve
UbuntuCve
added 2013/08/23 4:55 p.m.15 views

CVE-2012-4733

Request Tracker RT 4.x before 4.0.13 does not properly enforce the DeleteTicket and "custom lifecycle transition" permission, which allows remote authenticated users with the ModifyTicket permission to delete tickets via unspecified vectors...

6CVSS7.2AI score0.00567EPSS
Exploits0References1
Cvelist
Cvelist
added 2013/08/23 4:0 p.m.19 views

CVE-2012-4733

Request Tracker RT 4.x before 4.0.13 does not properly enforce the DeleteTicket and "custom lifecycle transition" permission, which allows remote authenticated users with the ModifyTicket permission to delete tickets via unspecified vectors...

8.2AI score0.00567EPSS
Exploits0References4
CVE
CVE
added 2013/08/23 4:0 p.m.55 views

CVE-2012-4733

CVE-2012-4733 affects Request Tracker (RT) 4.x prior to 4.0.13. The issue is an improper enforcement of the DeleteTicket and “custom lifecycle transition” permissions, allowing remote authenticated users who have the ModifyTicket permission to delete tickets via unspecified vectors. The connected...

6CVSS8.1AI score0.00567EPSS
Exploits0References4Affected Software1
Debian CVE
Debian CVE
added 2013/08/23 4:0 p.m.21 views

CVE-2012-4733

Request Tracker RT 4.x before 4.0.13 does not properly enforce the DeleteTicket and "custom lifecycle transition" permission, which allows remote authenticated users with the ModifyTicket permission to delete tickets via unspecified vectors...

6CVSS8AI score0.00567EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2013/07/22 12:0 a.m.42 views

Request Tracker 3.8.x < 3.8.17 / 4.x < 4.0.13 Multiple Vulnerabilities

According to its self-reported version number, the Best Practical Solutions Request Tracker RT running on the remote web server is version 3.8.x prior to 3.8.17 or version 4.x prior to 4.0.13. It is, therefore, potentially affected by the following vulnerabilities : - A flaw exists that allows a...

6.8CVSS7.8AI score0.0113EPSS
Exploits0References12
Rows per page
Query Builder