CVEvulnerability
CVE-2013-3369
6.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-08-23
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.0 MEDIUM — AV:N/AC:M/Au:S/C:P/I:P/A:P
Description
Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13 allows remote authenticated users with the permissions to view the administration pages to execute arbitrary private components via unspecified vectors.
Affected configurations
• bestpractical rt 3.8.0
• bestpractical rt 3.8.1
• bestpractical rt 3.8.2
• bestpractical rt 3.8.3
• bestpractical rt 3.8.4
• bestpractical rt 3.8.5
• bestpractical rt 3.8.6
• bestpractical rt 3.8.7
• bestpractical rt 3.8.8
• bestpractical rt 3.8.9
• bestpractical rt 3.8.10
• bestpractical rt 3.8.11
• bestpractical rt 3.8.12
• bestpractical rt 3.8.13
• bestpractical rt 3.8.14
• bestpractical rt 3.8.15
• bestpractical rt 3.8.16
• bestpractical rt 4.0.0
• bestpractical rt 4.0.1
• bestpractical rt 4.0.2
• bestpractical rt 4.0.3
• bestpractical rt 4.0.4
• bestpractical rt 4.0.5
• bestpractical rt 4.0.6
• bestpractical rt 4.0.7
• bestpractical rt 4.0.8
• bestpractical rt 4.0.9
• bestpractical rt 4.0.10
• bestpractical rt 4.0.11
• bestpractical rt 4.0.12
References
- http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000226.html Patch, Vendor Advisory
- http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000227.html Patch, Vendor Advisory
- http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000228.html Patch, Vendor Advisory
- http://secunia.com/advisories/53505 Vendor Advisory
- http://secunia.com/advisories/53522 Vendor Advisory
- http://www.debian.org/security/2012/dsa-2670 www.debian.org
- http://www.osvdb.org/93610 www.osvdb.org
- http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000226.html Patch, Vendor Advisory
- http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000227.html Patch, Vendor Advisory
- http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000228.html Patch, Vendor Advisory
- http://secunia.com/advisories/53505 Vendor Advisory
- http://secunia.com/advisories/53522 Vendor Advisory
- http://www.debian.org/security/2012/dsa-2670 www.debian.org
- http://www.osvdb.org/93610 www.osvdb.org