CVEvulnerability
CVE-2011-1687
4.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2011-04-22
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
Best Practical Solutions RT 3.0.0 through 3.6.10, 3.8.0 through 3.8.9, and 4.0.0rc through 4.0.0rc7 allows remote authenticated users to obtain sensitive information by using the search interface, as demonstrated by retrieving encrypted passwords.
Affected configurations
• bestpractical rt 3.0.0
• bestpractical rt 3.0.1
• bestpractical rt 3.0.2
• bestpractical rt 3.0.3
• bestpractical rt 3.0.4
• bestpractical rt 3.0.5
• bestpractical rt 3.0.6
• bestpractical rt 3.0.7
• bestpractical rt 3.0.7.1
• bestpractical rt 3.0.8
• bestpractical rt 3.0.9
• bestpractical rt 3.0.10
• bestpractical rt 3.0.11
• bestpractical rt 3.0.12
• bestpractical rt 3.2.0
• bestpractical rt 3.2.1
• bestpractical rt 3.2.2
• bestpractical rt 3.2.3
• bestpractical rt 3.4.0
• bestpractical rt 3.4.1
• bestpractical rt 3.4.2
• bestpractical rt 3.4.3
• bestpractical rt 3.4.4
• bestpractical rt 3.4.5
• bestpractical rt 3.4.6
• bestpractical rt 3.6.0
• bestpractical rt 3.6.1
• bestpractical rt 3.6.2
• bestpractical rt 3.6.3
• bestpractical rt 3.6.4
• bestpractical rt 3.6.5
• bestpractical rt 3.6.6
• bestpractical rt 3.6.7
• bestpractical rt 3.6.8
• bestpractical rt 3.6.9
• bestpractical rt 3.6.10
• bestpractical rt 3.8.0
• bestpractical rt 3.8.1
• bestpractical rt 3.8.2
• bestpractical rt 3.8.3
• bestpractical rt 3.8.4
• bestpractical rt 3.8.5
• bestpractical rt 3.8.6
• bestpractical rt 3.8.7
• bestpractical rt 3.8.8
• bestpractical rt 3.8.9
• bestpractical rt 4.0.0
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://blog.bestpractical.com/2011/04/security-vulnerabilities-in-rt.html blog.bestpractical.com
- http://lists.bestpractical.com/pipermail/rt-announce/2011-April/000187.html Patch
- http://lists.bestpractical.com/pipermail/rt-announce/2011-April/000188.html Patch
- http://lists.bestpractical.com/pipermail/rt-announce/2011-April/000189.html Patch
- http://secunia.com/advisories/44189 Vendor Advisory
- http://www.debian.org/security/2011/dsa-2220 www.debian.org
- http://www.securityfocus.com/bid/47383 www.securityfocus.com
- http://www.vupen.com/english/advisories/2011/1071 www.vupen.com
- https://bugzilla.redhat.com/show_bug.cgi?id=696795 Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/66793 exchange.xforce.ibmcloud.com
- http://blog.bestpractical.com/2011/04/security-vulnerabilities-in-rt.html blog.bestpractical.com
- http://lists.bestpractical.com/pipermail/rt-announce/2011-April/000187.html Patch
- http://lists.bestpractical.com/pipermail/rt-announce/2011-April/000188.html Patch
- http://lists.bestpractical.com/pipermail/rt-announce/2011-April/000189.html Patch
- http://secunia.com/advisories/44189 Vendor Advisory
- http://www.debian.org/security/2011/dsa-2220 www.debian.org
- http://www.securityfocus.com/bid/47383 www.securityfocus.com
- http://www.vupen.com/english/advisories/2011/1071 www.vupen.com
- https://bugzilla.redhat.com/show_bug.cgi?id=696795 Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/66793 exchange.xforce.ibmcloud.com