Best Practical Solutions RT 3.0.0 through 3.6.10, 3.8.0 through 3.8.9, and 4.0.0rc through 4.0.0rc7 allows remote authenticated users to obtain sensitive information by using the search interface, as demonstrated by retrieving encrypted passwords.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
History
No history.
Information
Published : 2011-04-22 10:55
Updated : 2024-02-28 11:41
NVD link : CVE-2011-1687
Mitre link : CVE-2011-1687
CVE.ORG link : CVE-2011-1687
JSON object : View
Products Affected
bestpractical
- rt
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor