CVE-2013-3374
CVE-2013-3374
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Unspecified vulnerability in Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13, when using the Apache::Session::File session store, allows remote attackers to obtain sensitive information (user preferences and caches) via unknown vectors, related to a "limited session re-use."
EPSS 1.4% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
request-tracker4 Debian:12
- Affected ranges
- ECOSYSTEM: < 4.0.12-2
Update to 4.0.12-2
Original sources
- http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000228.html
- http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000226.html
- http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000227.html
- http://secunia.com/advisories/53505
- http://www.debian.org/security/2012/dsa-2670
- http://secunia.com/advisories/53522
- http://www.osvdb.org/93605
- https://nvd.nist.gov/vuln/detail/CVE-2013-3374