Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2009-4151
5.8
MEDIUMCVSS v2
Published
December 2, 2009
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
Session fixation vulnerability in html/Elements/SetupSessionCookie in Best Practical Solutions RT 3.0.0 through 3.6.9 and 3.8.x through 3.8.5 allows remote attackers to hijack web sessions by setting the session identifier via a manipulation that leverages "HTTP access to the RT server," a related issue to CVE-2009-3585.
bestpractical/rt
GitHubRequest Tracker, an enterprise-grade issue tracking system
GitHubRequest Tracker, an enterprise-grade issue tracking system= 3.0.4, = 3.0.8, = 3.4.5, = 3.0.2, = 3.6.7, = 3.6.2, = 3.2.2, = 3.6.3, = 3.0.11, = 3.0.1, = 3.4.0, = 3.6.0, = 3.0.10, = 3.8.0, = 3.2.0, = 3.4.3, = 3.4.4, = 3.6.5, = 3.8.2, = 3.8.5, = 3.0.3, = 3.0.5, = 3.2.1, = 3.2.3, = 3.4.6, = 3.6.6, = 3.6.9, = 3.0.6, = 3.0.7, = 3.6.1, = 3.8.4, = 3.8.3, = 3.0.7.1, = 3.4.1, = 3.4.2, = 3.8.1, = 3.0.12, = 3.0.9, = 3.6.4, = 3.6.8NVD