CVE-2015-1165

RT (aka Request Tracker) 3.8.8 through 4.x before 4.0.23 and 4.2.x before 4.2.10 allows remote attackers to obtain sensitive RSS feed URLs and ticket data via unspecified vectors.
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:21:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:a:bestpractical:request_tracker:3.8.8:*:*:*:*:*:*:*
cpe:2.3:a:bestpractical:request_tracker:3.8.9:*:*:*:*:*:*:*
cpe:2.3:a:bestpractical:request_tracker:3.8.10:*:*:*:*:*:*:*
cpe:2.3:a:bestpractical:request_tracker:3.8.11:*:*:*:*:*:*:*
cpe:2.3:a:bestpractical:request_tracker:3.8.12:*:*:*:*:*:*:*
cpe:2.3:a:bestpractical:request_tracker:3.8.13:*:*:*:*:*:*:*
cpe:2.3:a:bestpractical:request_tracker:3.8.14:*:*:*:*:*:*:*
cpe:2.3:a:bestpractical:request_tracker:3.8.15:*:*:*:*:*:*:*
cpe:2.3:a:bestpractical:request_tracker:3.8.16:*:*:*:*:*:*:*
cpe:2.3:a:bestpractical:request_tracker:3.8.17:*:*:*:*:*:*:*
cpe:2.3:a:bestpractical:request_tracker:4.0.0:*:*:*:*:*:*:*
cpe:2.3:a:bestpractical:request_tracker:4.0.1:*:*:*:*:*:*:*
cpe:2.3:a:bestpractical:request_tracker:4.0.2:*:*:*:*:*:*:*
cpe:2.3:a:bestpractical:request_tracker:4.0.3:*:*:*:*:*:*:*
cpe:2.3:a:bestpractical:request_tracker:4.0.4:*:*:*:*:*:*:*
cpe:2.3:a:bestpractical:request_tracker:4.0.5:*:*:*:*:*:*:*
cpe:2.3:a:bestpractical:request_tracker:4.0.6:*:*:*:*:*:*:*
cpe:2.3:a:bestpractical:request_tracker:4.0.7:*:*:*:*:*:*:*
cpe:2.3:a:bestpractical:request_tracker:4.0.8:*:*:*:*:*:*:*
cpe:2.3:a:bestpractical:request_tracker:4.0.9:*:*:*:*:*:*:*
cpe:2.3:a:bestpractical:request_tracker:4.0.10:*:*:*:*:*:*:*
cpe:2.3:a:bestpractical:request_tracker:4.0.11:*:*:*:*:*:*:*
cpe:2.3:a:bestpractical:request_tracker:4.0.12:*:*:*:*:*:*:*
cpe:2.3:a:bestpractical:request_tracker:4.0.13:*:*:*:*:*:*:*
cpe:2.3:a:bestpractical:request_tracker:4.0.14:*:*:*:*:*:*:*
cpe:2.3:a:bestpractical:request_tracker:4.0.15:*:*:*:*:*:*:*
cpe:2.3:a:bestpractical:request_tracker:4.0.16:*:*:*:*:*:*:*
cpe:2.3:a:bestpractical:request_tracker:4.0.17:*:*:*:*:*:*:*
cpe:2.3:a:bestpractical:request_tracker:4.0.18:*:*:*:*:*:*:*
cpe:2.3:a:bestpractical:request_tracker:4.0.19:*:*:*:*:*:*:*
cpe:2.3:a:bestpractical:request_tracker:4.0.20:*:*:*:*:*:*:*
cpe:2.3:a:bestpractical:request_tracker:4.0.21:*:*:*:*:*:*:*
cpe:2.3:a:bestpractical:request_tracker:4.0.22:*:*:*:*:*:*:*
cpe:2.3:a:bestpractical:request_tracker:4.2.0:*:*:*:*:*:*:*
cpe:2.3:a:bestpractical:request_tracker:4.2.1:*:*:*:*:*:*:*
cpe:2.3:a:bestpractical:request_tracker:4.2.2:*:*:*:*:*:*:*
cpe:2.3:a:bestpractical:request_tracker:4.2.3:*:*:*:*:*:*:*
cpe:2.3:a:bestpractical:request_tracker:4.2.4:*:*:*:*:*:*:*
cpe:2.3:a:bestpractical:request_tracker:4.2.5:*:*:*:*:*:*:*
cpe:2.3:a:bestpractical:request_tracker:4.2.6:*:*:*:*:*:*:*
cpe:2.3:a:bestpractical:request_tracker:4.2.7:*:*:*:*:*:*:*
cpe:2.3:a:bestpractical:request_tracker:4.2.8:*:*:*:*:*:*:*
cpe:2.3:a:bestpractical:request_tracker:4.2.9:*:*:*:*:*:*:*

History

No history.

Information

Published : 2015-03-09 14:59

Updated : 2024-02-04 18:35


NVD link : CVE-2015-1165

Mitre link : CVE-2015-1165

CVE.ORG link : CVE-2015-1165


JSON object : View

Products Affected

bestpractical

  • request_tracker

debian

  • debian_linux

fedoraproject

  • fedora
CWE
CWE-200

Exposure of Sensitive Information to an Unauthorized Actor