6.8
CVSSv2

CVE-2013-3370

Published: 23/08/2013 Updated: 26/08/2013
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
VMScore: 605
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Summary

Request Tracker (RT) 3.8.x prior to 3.8.17 and 4.0.x prior to 4.0.13 does not properly restrict access to private callback components, which allows remote malicious users to have an unspecified impact via a direct request.

Vulnerable Product Search on Vulmon Subscribe to Product

bestpractical rt 4.0.9

bestpractical rt 4.0.0

bestpractical rt 4.0.3

bestpractical rt 4.0.8

bestpractical rt 4.0.12

bestpractical rt 4.0.11

bestpractical rt 4.0.1

bestpractical rt 4.0.2

bestpractical rt 4.0.5

bestpractical rt 4.0.6

bestpractical rt 4.0.7

bestpractical rt 4.0.10

bestpractical rt 4.0.4

bestpractical rt 3.8.0

bestpractical rt 3.8.1

bestpractical rt 3.8.10

bestpractical rt 3.8.13

bestpractical rt 3.8.14

bestpractical rt 3.8.3

bestpractical rt 3.8.4

bestpractical rt 3.8.7

bestpractical rt 3.8.8

bestpractical rt 3.8.16

bestpractical rt 3.8.11

bestpractical rt 3.8.12

bestpractical rt 3.8.5

bestpractical rt 3.8.6

bestpractical rt 3.8.15

bestpractical rt 3.8.2

bestpractical rt 3.8.9

Vendor Advisories

Debian Bug report logs - #709836 Multiple security issues Package: src:request-tracker4; Maintainer for src:request-tracker4 is Debian Request Tracker Group <pkg-request-tracker-maintainers@listsaliothdebianorg>; Reported by: Dominic Hargreaves <dom@earthli> Date: Sat, 25 May 2013 21:09:06 UTC Severity: serious ...