This site currently shows sample data for demonstration.

Vulnerabilities

CVE-2024-3262 | BDVDB-2026-230010 Detail

Best Practical SolutionsRequest Tracker

Description#

Information exposure vulnerability in RT software affecting version 4.4.1. This vulnerability allows an attacker with local access to the device to retrieve sensitive information about the application, such as vulnerability tickets, because the application stores the information in the browser cache, leading to information exposure despite session termination.

Impact#

Per CVSS v3.1: confidentiality impact high, integrity impact none, availability impact none. Attack vector: local.

Weaknesses#

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.
  2. Version 2Most recent update recorded in the CVE List.