CVE-2015-1464

RT (aka Request Tracker) before 4.0.23 and 4.2.x before 4.2.10 allows remote attackers to hijack sessions via an RSS feed URL.

CVSS v2.0 6.4 MEDIUM

6.4^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:N

Exploitability : 10.0 / Impact : 4.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
http://blog.bestpractical.com/2015/02/security-vulnerabilities-in-rt.html	Vendor Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154213.html
http://lists.fedoraproject.org/pipermail/package-announce/2015-March/154047.html
http://www.debian.org/security/2015/dsa-3176
http://blog.bestpractical.com/2015/02/security-vulnerabilities-in-rt.html	Vendor Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154213.html
http://lists.fedoraproject.org/pipermail/package-announce/2015-March/154047.html
http://www.debian.org/security/2015/dsa-3176

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:fedoraproject:fedora:21:::::::*
	cpe:2.3:o:fedoraproject:fedora:22:::::::*

Configuration 2 (hide)

OR	cpe:2.3:a:bestpractical:request_tracker::::::::
	cpe:2.3:a:bestpractical:request_tracker:4.2.0:::::::*
	cpe:2.3:a:bestpractical:request_tracker:4.2.1:::::::*
	cpe:2.3:a:bestpractical:request_tracker:4.2.2:::::::*
	cpe:2.3:a:bestpractical:request_tracker:4.2.3:::::::*
	cpe:2.3:a:bestpractical:request_tracker:4.2.4:::::::*
	cpe:2.3:a:bestpractical:request_tracker:4.2.5:::::::*
	cpe:2.3:a:bestpractical:request_tracker:4.2.6:::::::*
	cpe:2.3:a:bestpractical:request_tracker:4.2.7:::::::*
	cpe:2.3:a:bestpractical:request_tracker:4.2.8:::::::*
	cpe:2.3:a:bestpractical:request_tracker:4.2.9:::::::*

History

No history.

Information

Published : 2015-03-09 14:59

Updated : 2025-04-12 10:46

NVD link : CVE-2015-1464

Mitre link : CVE-2015-1464

CVE.ORG link : CVE-2015-1464

JSON object : View

Products Affected

bestpractical

request_tracker

fedoraproject

fedora

CWE

CWE-284

Improper Access Control

{"id": "CVE-2015-1464", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.4, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 4.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2015-03-09T14:59:06.450", "references": [{"url": "http://blog.bestpractical.com/2015/02/security-vulnerabilities-in-rt.html", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154213.html", "source": "cve@mitre.org"}, {"url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-March/154047.html", "source": "cve@mitre.org"}, {"url": "http://www.debian.org/security/2015/dsa-3176", "source": "cve@mitre.org"}, {"url": "http://blog.bestpractical.com/2015/02/security-vulnerabilities-in-rt.html", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154213.html", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-March/154047.html", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.debian.org/security/2015/dsa-3176", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-284"}]}], "descriptions": [{"lang": "en", "value": "RT (aka Request Tracker) before 4.0.23 and 4.2.x before 4.2.10 allows remote attackers to hijack sessions via an RSS feed URL."}, {"lang": "es", "value": "RT (tambi\u00e9n conocido como Request Tracker) anterior a 4.0.23 y 4.2.x anterior a 4.2.10 permite a atacantes remotos secuestrar sesiones a trav\u00e9s de una URL de alimentaci\u00f3n RSS."}], "lastModified": "2025-04-12T10:46:40.837", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:fedoraproject:fedora:21:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "56BDB5A0-0839-4A20-A003-B8CD56F48171"}, {"criteria": "cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "253C303A-E577-4488-93E6-68A8DD942C38"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:bestpractical:request_tracker:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7FDDD86F-98D0-49D7-8467-AAF9842F771D", "versionEndIncluding": "4.0.22"}, {"criteria": "cpe:2.3:a:bestpractical:request_tracker:4.2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "016A9A48-9F12-4842-862F-4A192DA0D924"}, {"criteria": "cpe:2.3:a:bestpractical:request_tracker:4.2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0D148F2A-F6B1-432A-9743-35BC43E86B40"}, {"criteria": "cpe:2.3:a:bestpractical:request_tracker:4.2.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2445145B-A162-484D-ABDF-053C20FD7E96"}, {"criteria": "cpe:2.3:a:bestpractical:request_tracker:4.2.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "15EE6E16-375A-42B0-AE3C-E1FB95E9F466"}, {"criteria": "cpe:2.3:a:bestpractical:request_tracker:4.2.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "83BF8033-9E4D-4B8B-B9E4-E992FE848F4E"}, {"criteria": "cpe:2.3:a:bestpractical:request_tracker:4.2.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6C68D322-E453-48D5-A5FB-39C744D90858"}, {"criteria": "cpe:2.3:a:bestpractical:request_tracker:4.2.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3881CA9B-5358-4808-9041-DE3E2FC8927F"}, {"criteria": "cpe:2.3:a:bestpractical:request_tracker:4.2.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A95CE3FD-5311-4644-8417-A74FF6B88458"}, {"criteria": "cpe:2.3:a:bestpractical:request_tracker:4.2.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E1DD1F04-3D0E-4210-8039-073B28ECCD85"}, {"criteria": "cpe:2.3:a:bestpractical:request_tracker:4.2.9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "26235782-E3A1-4D71-9E82-87DAC822D79D"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}