CVEvulnerability
CVE-2011-2085
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2012-06-04
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-352
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in Best Practical Solutions RT before 3.8.12 and 4.x before 4.0.6 allow remote attackers to hijack the authentication of arbitrary users.
Affected configurations
• bestpractical rt (<= 3.8.11)
• bestpractical rt 1.0.0
• bestpractical rt 1.0.1
• bestpractical rt 1.0.2
• bestpractical rt 1.0.3
• bestpractical rt 1.0.4
• bestpractical rt 1.0.5
• bestpractical rt 1.0.6
• bestpractical rt 1.0.7
• bestpractical rt 2.0.0
• bestpractical rt 2.0.1
• bestpractical rt 2.0.2
• bestpractical rt 2.0.3
• bestpractical rt 2.0.4
• bestpractical rt 2.0.5
• bestpractical rt 2.0.5.1
• bestpractical rt 2.0.5.3
• bestpractical rt 2.0.6
• bestpractical rt 2.0.7
• bestpractical rt 2.0.8
• bestpractical rt 2.0.8.2
• bestpractical rt 2.0.9
• bestpractical rt 2.0.11
• bestpractical rt 2.0.12
• bestpractical rt 2.0.13
• bestpractical rt 2.0.14
• bestpractical rt 2.0.15
• bestpractical rt 3.0.0
• bestpractical rt 3.0.1
• bestpractical rt 3.0.2
• bestpractical rt 3.0.3
• bestpractical rt 3.0.4
• bestpractical rt 3.0.5
• bestpractical rt 3.0.6
• bestpractical rt 3.0.7
• bestpractical rt 3.0.7.1
• bestpractical rt 3.0.8
• bestpractical rt 3.0.9
• bestpractical rt 3.0.10
• bestpractical rt 3.0.11
• bestpractical rt 3.0.12
• bestpractical rt 3.1.2
• bestpractical rt 3.1.3
• bestpractical rt 3.1.4
• bestpractical rt 3.1.5
• bestpractical rt 3.1.6
• bestpractical rt 3.1.7
• bestpractical rt 3.1.8
• bestpractical rt 3.1.10
• bestpractical rt 3.1.11
• bestpractical rt 3.1.12
• bestpractical rt 3.1.13
• bestpractical rt 3.1.14
• bestpractical rt 3.1.15
• bestpractical rt 3.1.16
• bestpractical rt 3.1.17
• bestpractical rt 3.2.0
• bestpractical rt 3.2.1
• bestpractical rt 3.2.2
• bestpractical rt 3.2.3
… and 49 more
Related
Weakness · CWE (1)
- CWE-352 Cross-Site Request Forgery weakness
References
- http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000202.html Patch
- http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000203.html Patch
- http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000204.html Vendor Advisory
- http://secunia.com/advisories/49259 secunia.com
- http://www.securityfocus.com/bid/53660 www.securityfocus.com
- https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E lists.apache.org
- http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000202.html Patch
- http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000203.html Patch
- http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000204.html Vendor Advisory
- http://secunia.com/advisories/49259 secunia.com
- http://www.securityfocus.com/bid/53660 www.securityfocus.com
- https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E lists.apache.org