CVEvulnerability
CVE-2011-2084
4.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2012-06-04
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
Best Practical Solutions RT 3.x before 3.8.12 and 4.x before 4.0.6 allows remote authenticated users to read (1) hashes of former passwords and (2) ticket correspondence history by leveraging access to a privileged account.
Affected configurations
• bestpractical rt 3.0.0
• bestpractical rt 3.0.1
• bestpractical rt 3.0.2
• bestpractical rt 3.0.3
• bestpractical rt 3.0.4
• bestpractical rt 3.0.5
• bestpractical rt 3.0.6
• bestpractical rt 3.0.7
• bestpractical rt 3.0.7.1
• bestpractical rt 3.0.8
• bestpractical rt 3.0.9
• bestpractical rt 3.0.10
• bestpractical rt 3.0.11
• bestpractical rt 3.0.12
• bestpractical rt 3.1.2
• bestpractical rt 3.1.3
• bestpractical rt 3.1.4
• bestpractical rt 3.1.5
• bestpractical rt 3.1.6
• bestpractical rt 3.1.7
• bestpractical rt 3.1.8
• bestpractical rt 3.1.10
• bestpractical rt 3.1.11
• bestpractical rt 3.1.12
• bestpractical rt 3.1.13
• bestpractical rt 3.1.14
• bestpractical rt 3.1.15
• bestpractical rt 3.1.16
• bestpractical rt 3.1.17
• bestpractical rt 3.2.0
• bestpractical rt 3.2.1
• bestpractical rt 3.2.2
• bestpractical rt 3.2.3
• bestpractical rt 3.4.0
• bestpractical rt 3.4.1
• bestpractical rt 3.4.2
• bestpractical rt 3.4.3
• bestpractical rt 3.4.4
• bestpractical rt 3.4.5
• bestpractical rt 3.4.6
• bestpractical rt 3.4.7
• bestpractical rt 3.5.1
• bestpractical rt 3.5.2
• bestpractical rt 3.5.3
• bestpractical rt 3.5.4
• bestpractical rt 3.5.5
• bestpractical rt 3.5.6
• bestpractical rt 3.5.7
• bestpractical rt 3.6.0
• bestpractical rt 3.6.1
• bestpractical rt 3.6.2
• bestpractical rt 3.6.3
• bestpractical rt 3.6.4
• bestpractical rt 3.6.5
• bestpractical rt 3.6.6
• bestpractical rt 3.6.7
• bestpractical rt 3.6.8
• bestpractical rt 3.6.9
• bestpractical rt 3.6.10
• bestpractical rt 3.7.1
… and 23 more
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000202.html Vendor Advisory
- http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000203.html Patch
- http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000204.html Patch
- http://secunia.com/advisories/49259 secunia.com
- http://www.securityfocus.com/bid/53660 www.securityfocus.com
- http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000202.html Vendor Advisory
- http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000203.html Patch
- http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000204.html Patch
- http://secunia.com/advisories/49259 secunia.com
- http://www.securityfocus.com/bid/53660 www.securityfocus.com