p PatchFirst

CVE-2024-3262

CVE-2024-3262 · Information exposure vulnerability in Request Tracker (RT)

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Information exposure vulnerability in RT software affecting version 4.4.1. This vulnerability allows an attacker with local access to the device to retrieve sensitive information about the application, such as vulnerability tickets, because the application stores the information in the browser cache, leading to information exposure despite session termination.

CVSS 5.5 · Medium · EPSS 0.3% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • request tracker

    Versions
    • 4.4.1: Affected

    No fix published

  • request-tracker4 Debian:12

    Versions
    • 4.4.6+dfsg-1.1
    • 4.4.6+dfsg-1.1+deb12u1
    Affected ranges
    • ECOSYSTEM: < 4.4.6+dfsg-1.1+deb12u2

    Update to 4.4.6+dfsg-1.1+deb12u2

  • request-tracker5 Debian:12

    Versions
    • 5.0.3+dfsg-2
    • 5.0.3+dfsg-3~deb12u1
    • 5.0.3+dfsg-3~deb12u2
    Affected ranges
    • ECOSYSTEM: < 5.0.3+dfsg-3~deb12u3

    Update to 5.0.3+dfsg-3~deb12u3

  • request-tracker5 Debian:13

    Affected ranges
    • ECOSYSTEM: < 5.0.7+dfsg-1

    Update to 5.0.7+dfsg-1

  • request-tracker5 Debian:14

    Affected ranges
    • ECOSYSTEM: < 5.0.7+dfsg-1

    Update to 5.0.7+dfsg-1

  • request-tracker4 Ubuntu:16.04:LTS

    Versions
    • 4.2.11-2
    • 4.2.12-3
    • 4.2.12-4
    • 4.2.12-5
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • request-tracker4 Ubuntu:Pro:18.04:LTS

    Versions
    • 4.4.1-5
    • 4.4.2-1
    • 4.4.2-2
    • 4.4.2-2ubuntu0.1~esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • request-tracker4 Ubuntu:20.04:LTS

    Versions
    • 4.4.3-2
    • 4.4.3-2+deb10u3build0.20.04.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • request-tracker4 Ubuntu:22.04:LTS

    Versions
    • 4.4.4+dfsg-2ubuntu1
    • 4.4.4+dfsg-2ubuntu1.22.04.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • request-tracker5 Ubuntu:Pro:22.04:LTS

    Versions
    • 5.0.1+dfsg-1ubuntu1
    Affected ranges
    • ECOSYSTEM: < 5.0.1+dfsg-1ubuntu1+esm1

    Update to 5.0.1+dfsg-1ubuntu1+esm1

  • request-tracker4 Ubuntu:24.04:LTS

    Versions
    • 4.4.4+dfsg-2ubuntu1
    • 4.4.4+dfsg-2ubuntu2
    • 4.4.7+dfsg-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • request-tracker5 Ubuntu:Pro:24.04:LTS

    Versions
    • 5.0.1+dfsg-1ubuntu1
    • 5.0.5+dfsg-2
    Affected ranges
    • ECOSYSTEM: < 5.0.5+dfsg-2ubuntu0.1~esm1

    Update to 5.0.5+dfsg-2ubuntu0.1~esm1

  • request-tracker4 Ubuntu:25.10

    Versions
    • 4.4.7+dfsg-4syncable1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • request-tracker4 Ubuntu:26.04:LTS

    Versions
    • 4.4.7+dfsg-4syncable1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →