Vulnerability Description
Best Practical Solutions RT 3.0.0 through 3.6.10, 3.8.0 through 3.8.9, and 4.0.0rc through 4.0.0rc7 allows remote authenticated users to obtain sensitive information by using the search interface, as demonstrated by retrieving encrypted passwords.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bestpractical | Rt | 3.0.0 |
Related Weaknesses (CWE)
References
- http://blog.bestpractical.com/2011/04/security-vulnerabilities-in-rt.html
- http://lists.bestpractical.com/pipermail/rt-announce/2011-April/000187.htmlPatch
- http://lists.bestpractical.com/pipermail/rt-announce/2011-April/000188.htmlPatch
- http://lists.bestpractical.com/pipermail/rt-announce/2011-April/000189.htmlPatch
- http://secunia.com/advisories/44189Vendor Advisory
- http://www.debian.org/security/2011/dsa-2220
- http://www.securityfocus.com/bid/47383
- http://www.vupen.com/english/advisories/2011/1071
- https://bugzilla.redhat.com/show_bug.cgi?id=696795Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/66793
- http://blog.bestpractical.com/2011/04/security-vulnerabilities-in-rt.html
- http://lists.bestpractical.com/pipermail/rt-announce/2011-April/000187.htmlPatch
- http://lists.bestpractical.com/pipermail/rt-announce/2011-April/000188.htmlPatch
- http://lists.bestpractical.com/pipermail/rt-announce/2011-April/000189.htmlPatch
- http://secunia.com/advisories/44189Vendor Advisory
FAQ
What is CVE-2011-1687?
CVE-2011-1687 is a vulnerability with a CVSS score of 4.0 (MEDIUM). Best Practical Solutions RT 3.0.0 through 3.6.10, 3.8.0 through 3.8.9, and 4.0.0rc through 4.0.0rc7 allows remote authenticated users to obtain sensitive information by using the search interface, as ...
How severe is CVE-2011-1687?
CVE-2011-1687 has been rated MEDIUM with a CVSS base score of 4.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2011-1687?
Check the references section above for vendor advisories and patch information. Affected products include: Bestpractical Rt.