CVE-2011-2084 | BDVDB-2026-50384 Detail

Description#

Best Practical Solutions RT 3.x before 3.8.12 and 4.x before 4.0.6 allows remote authenticated users to read (1) hashes of former passwords and (2) ticket correspondence history by leveraging access to a privileged account.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000203.html
http://secunia.com/advisories/49259
http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000204.html
http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000202.html
http://www.securityfocus.com/bid/53660

Exploit#

No public exploit known

History#

Version 12012-06-04Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.