p PatchFirst

CVE-2021-38562

CVE-2021-38562

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Best Practical Request Tracker (RT) 4.2 before 4.2.17, 4.4 before 4.4.5, and 5.0 before 5.0.2 allows sensitive information disclosure via a timing attack against lib/RT/REST2/Middleware/Auth.pm.

CVSS 7.5 · High · EPSS 1.8% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • request-tracker4 Debian:12

    Affected ranges
    • ECOSYSTEM: < 4.4.4+dfsg-3

    Update to 4.4.4+dfsg-3

  • request-tracker5 Debian:12

    Affected ranges
    • ECOSYSTEM: < 5.0.3+dfsg-1

    Update to 5.0.3+dfsg-1

  • request-tracker5 Debian:13

    Affected ranges
    • ECOSYSTEM: < 5.0.3+dfsg-1

    Update to 5.0.3+dfsg-1

  • request-tracker5 Debian:14

    Affected ranges
    • ECOSYSTEM: < 5.0.3+dfsg-1

    Update to 5.0.3+dfsg-1

  • request-tracker4 Ubuntu:16.04:LTS

    Versions
    • 4.2.11-2
    • 4.2.12-3
    • 4.2.12-4
    • 4.2.12-5
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • request-tracker4 Ubuntu:Pro:18.04:LTS

    Versions
    • 4.4.1-5
    • 4.4.2-1
    • 4.4.2-2
    Affected ranges
    • ECOSYSTEM: < 4.4.2-2ubuntu0.1~esm1

    Update to 4.4.2-2ubuntu0.1~esm1

  • request-tracker4 Ubuntu:20.04:LTS

    Versions
    • 4.4.3-2
    Affected ranges
    • ECOSYSTEM: < 4.4.3-2+deb10u3build0.20.04.1

    Update to 4.4.3-2+deb10u3build0.20.04.1

  • request-tracker4 Ubuntu:22.04:LTS

    Versions
    • 4.4.4+dfsg-2ubuntu1
    Affected ranges
    • ECOSYSTEM: < 4.4.4+dfsg-2ubuntu1.22.04.1

    Update to 4.4.4+dfsg-2ubuntu1.22.04.1

  • request-tracker5 Ubuntu:Pro:22.04:LTS

    Versions
    • 5.0.1+dfsg-1ubuntu1
    Affected ranges
    • ECOSYSTEM: < 5.0.1+dfsg-1ubuntu1+esm1

    Update to 5.0.1+dfsg-1ubuntu1+esm1

  • request-tracker4 Ubuntu:24.04:LTS

    Versions
    • 4.4.4+dfsg-2ubuntu1
    Affected ranges
    • ECOSYSTEM: < 4.4.4+dfsg-2ubuntu2

    Update to 4.4.4+dfsg-2ubuntu2

Original sources

Check your server →