p PatchFirst

PatchFirst · Latest vulnerabilities

rt-authen-externalauth vulnerabilities

Vulnerabilities published for rt-authen-externalauth in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerability: 1

  1. CVE-2017-5361

    Medium · CVSS 5.9EPSS 1.37%Fix available

    CVE-2017-5361

    Request Tracker (RT) 4.x before 4.0.25, 4.2.x before 4.2.14, and 4.4.x before 4.4.2 does not use a constant-time comparison algorithm for secrets, which makes it easier for remote attackers to obtain sensitive user password information via a timing side-channel attack.

    rt-authen-externalauthOperating systems
    • Update to 0.25-1+deb8u1build0.16.04.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →