Request Tracker Password Information Disclosure Vulnerability
BID:45959
Info
Request Tracker Password Information Disclosure Vulnerability
| Bugtraq ID: | 45959 |
| Class: | Design Error |
| CVE: |
CVE-2011-0009 |
| Remote: | No |
| Local: | Yes |
| Published: | Jan 22 2011 12:00AM |
| Updated: | Jan 22 2011 12:00AM |
| Credit: | The vendor reported this issue. |
| Vulnerable: |
Bestpractical RT 3.8.8 Bestpractical RT 3.8.6 Bestpractical RT 3.8.5 Bestpractical RT 3.8.4 Bestpractical RT 3.8.2 Bestpractical RT 3.6.7 Bestpractical RT 3.6.6 Bestpractical RT 3.6.2 |
| Not Vulnerable: | |
Discussion
Request Tracker Password Information Disclosure Vulnerability
Request Tracker is prone to an information-disclosure vulnerability because it fails to securely store passwords.
Successful attacks can allow a local attacker to gain access to the stored passwords.
Request Tracker 3.6.x and 3.8.x are affected; other versions may also be vulnerable.
Request Tracker is prone to an information-disclosure vulnerability because it fails to securely store passwords.
Successful attacks can allow a local attacker to gain access to the stored passwords.
Request Tracker 3.6.x and 3.8.x are affected; other versions may also be vulnerable.
Exploit / POC
Request Tracker Password Information Disclosure Vulnerability
Currently, we are not aware of any exploits. If you feel we are in error or if you are aware of any more recent information, please mail us at: [email protected].
Currently, we are not aware of any exploits. If you feel we are in error or if you are aware of any more recent information, please mail us at: [email protected].
Solution / Fix
Request Tracker Password Information Disclosure Vulnerability
Solution:
Updates are available. Please see the references for details.
Solution:
Updates are available. Please see the references for details.
References
Request Tracker Password Information Disclosure Vulnerability
References:
References:
- RT Homepage (Best Practical Solutions)