Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2011-1008
4
MEDIUMCVSS v2
Published
February 28, 2011
Affected
1 project
Assigned by
Red Hat
Severity scale
010
Description
Scrips_Overlay.pm in Best Practical Solutions RT before 3.8.9 does not properly restrict access to a TicketObj in a Scrip after a CurrentUser change, which allows remote authenticated users to obtain sensitive information via unspecified vectors, as demonstrated by custom-field value information, related to SQL logging.
bestpractical/rt
GitHubRequest Tracker, an enterprise-grade issue tracking system
GitHubRequest Tracker, an enterprise-grade issue tracking system<= 3.8.9, = 3.0.4, = 2.0.7, = 3.8.9, = 3.0.8, = 3.8.8, = 2.0.6, = 3.4.5, = 3.6.0, = 3.6.3, = 3.6.2, = 1.0.5, = 3.0.2, = 2.0.14, = 2.0.5.3, = 1.0.7, = 3.8.0, = 3.4.0, = 2.0.8.2, = 3.8.2, = 3.6.7, = 3.0.11, = 3.2.2, = 2.0.15, = 1.0.1, = 3.6.8, = 3.6.1, = 3.0.5, = 3.0.1, = 3.0.9, = 3.0.7.1, = 2.0.11, = 2.0.5, = 1.0.4, = 3.6.6, = 3.8.5, = 3.6.9, = 3.0.3, = 3.4.4, = 3.4.3, = 3.2.1, = 3.2.3, = 2.0.13, = 2.0.5.1, = 3.8.3, = 3.0.6, = 3.0.7, = 3.0.10, = 3.8.6, = 3.2.0, = 2.0.8, = 2.0.2, = 1.0.2, = 3.4.6, = 3.6.5, = 3.0.12, = 3.0.0, = 2.0.1, = 2.0.0, = 1.0.0, = 2.0.9, = 2.0.4, = 3.6.4, = 2.0.12, = 1.0.6, = 3.8.4, = 3.8.1, = 3.8.7, = 2.0.3, = 1.0.3, = 3.4.1, = 3.4.2NVD