Lucene search
Ubuntu.comUB:CVE-2011-1007HistoryFeb 28, 2011 - 12:00 a.m.
CVE-2011-1007
2011-02-2800:00:00
ubuntu.com
ubuntu.com
4
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
0.003 Low
EPSS
Percentile
65.7%
Best Practical Solutions RT before 3.8.9 does not perform certain redirect
actions upon a login, which allows physically proximate attackers to obtain
credentials by resubmitting the login form via the back button of a web
browser on an unattended workstation after an RT logout.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 11.04 | noarch | request-tracker3.8 | < 3.8.10-1 | UNKNOWN |
Related
prion
prion
Design/Logic Flaw
2011-02-28 16:00:00
cvelist
cvelist
CVE-2011-1007
2011-02-28 15:00:00
cve
cve
CVE-2011-1007
2011-02-28 16:00:01
nvd
nvd
CVE-2011-1007
2011-02-28 16:00:01
nessus
nessus
Request Tracker 3.x < 3.8.9 Security Bypass and Information Disclosure
2011-02-25 00:00:00
openvas
openvas
RT (Request Tracker) Multiple Vulnerabilities
2011-03-09 00:00:00
RT (Request Tracker) Multiple Vulnerabilities
2011-03-09 00:00:00
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
0.003 Low
EPSS
Percentile
65.7%
Related for UB:CVE-2011-1007