CVE-2012-6578 | BDVDB-2026-56734 Detail

Description#

Best Practical Solutions RT 3.8.x before 3.8.15 and 4.0.x before 4.0.8, when GnuPG is enabled with a "Sign by default" queue configuration, uses a queue's key for signing, which might allow remote attackers to spoof messages by leveraging the lack of authentication semantics.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://lists.bestpractical.com/pipermail/rt-announce/2012-October/000212.html

Exploit#

No public exploit known

History#

Version 12013-07-24Record published in the CVE List.
Version 22024-09-17Most recent update recorded in the CVE List.