Beveiligingsadvies

CVE-2012-4733

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2013-08-23 16:00:00
Laatst bijgewerkt 2024-09-16 20:36:33
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

Request Tracker (RT) 4.x before 4.0.13 does not properly enforce the DeleteTicket and "custom lifecycle transition" permission, which allows remote authenticated users with the ModifyTicket permission to delete tickets via unspecified vectors.