CVE-2011-4459 | BDVDB-2026-50387 Detail

Description#

Best Practical Solutions RT 3.x before 3.8.12 and 4.x before 4.0.6 does not properly disable groups, which allows remote authenticated users to bypass intended access restrictions in opportunistic circumstances by leveraging a group membership.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000203.html
http://secunia.com/advisories/49259
http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000204.html
http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000202.html
http://www.securityfocus.com/bid/53660

Exploit#

No public exploit known

History#

Version 12012-06-04Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.