CVEvulnerability
CVE-2011-5093
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2012-06-04
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
Best Practical Solutions RT 4.x before 4.0.6 does not properly implement the DisallowExecuteCode option, which allows remote authenticated users to bypass intended access restrictions and execute arbitrary code by leveraging access to a privileged account, a different vulnerability than CVE-2011-4458 and CVE-2011-5092.
Affected configurations
• bestpractical rt 3.8.12
• bestpractical rt 4.0.0
• bestpractical rt 4.0.1
• bestpractical rt 4.0.2
• bestpractical rt 4.0.3
• bestpractical rt 4.0.4
• bestpractical rt 4.0.5
Related
Weakness · not in database (1)
References
- http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000202.html Patch
- http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000203.html Patch
- http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000204.html Patch
- http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000202.html Patch
- http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000203.html Patch
- http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000204.html Patch