Best Practical Solutions RT 3.x before 3.8.12 and 4.x before 4.0.6 does not properly disable groups, which allows remote authenticated users to bypass intended access restrictions in opportunistic circumstances by leveraging a group membership.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
History
No history.
Information
Published : 2012-06-04 19:55
Updated : 2024-02-04 18:16
NVD link : CVE-2011-4459
Mitre link : CVE-2011-4459
CVE.ORG link : CVE-2011-4459
JSON object : View
Products Affected
bestpractical
- rt
CWE
CWE-264
Permissions, Privileges, and Access Controls