CVEvulnerability
CVE-2011-1690
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2011-04-22
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-255
Description
Best Practical Solutions RT 3.6.0 through 3.6.10 and 3.8.0 through 3.8.8 allows remote attackers to trick users into sending credentials to an arbitrary server via unspecified vectors.
Affected configurations
• bestpractical rt 3.6.0
• bestpractical rt 3.6.1
• bestpractical rt 3.6.2
• bestpractical rt 3.6.3
• bestpractical rt 3.6.4
• bestpractical rt 3.6.5
• bestpractical rt 3.6.6
• bestpractical rt 3.6.7
• bestpractical rt 3.6.8
• bestpractical rt 3.6.9
• bestpractical rt 3.6.10
• bestpractical rt 3.8.0
• bestpractical rt 3.8.1
• bestpractical rt 3.8.2
• bestpractical rt 3.8.3
• bestpractical rt 3.8.4
• bestpractical rt 3.8.5
• bestpractical rt 3.8.6
• bestpractical rt 3.8.7
• bestpractical rt 3.8.8
Related
Weakness · not in database (1)
References
- http://blog.bestpractical.com/2011/04/security-vulnerabilities-in-rt.html blog.bestpractical.com
- http://lists.bestpractical.com/pipermail/rt-announce/2011-April/000187.html Patch
- http://lists.bestpractical.com/pipermail/rt-announce/2011-April/000188.html Patch
- http://lists.bestpractical.com/pipermail/rt-announce/2011-April/000189.html Patch
- http://secunia.com/advisories/44189 Vendor Advisory
- http://www.debian.org/security/2011/dsa-2220 www.debian.org
- http://www.securityfocus.com/bid/47383 www.securityfocus.com
- http://www.vupen.com/english/advisories/2011/1071 www.vupen.com
- https://bugzilla.redhat.com/show_bug.cgi?id=696795 Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/66794 exchange.xforce.ibmcloud.com
- http://blog.bestpractical.com/2011/04/security-vulnerabilities-in-rt.html blog.bestpractical.com
- http://lists.bestpractical.com/pipermail/rt-announce/2011-April/000187.html Patch
- http://lists.bestpractical.com/pipermail/rt-announce/2011-April/000188.html Patch
- http://lists.bestpractical.com/pipermail/rt-announce/2011-April/000189.html Patch
- http://secunia.com/advisories/44189 Vendor Advisory
- http://www.debian.org/security/2011/dsa-2220 www.debian.org
- http://www.securityfocus.com/bid/47383 www.securityfocus.com
- http://www.vupen.com/english/advisories/2011/1071 www.vupen.com
- https://bugzilla.redhat.com/show_bug.cgi?id=696795 Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/66794 exchange.xforce.ibmcloud.com