NVD

Id
44475  
Name
CVE-2012-2770  
Description
The Authen::ExternalAuth extension before 0.11 for Best Practical Solutions RT allows remote attackers to obtain a logged-in session via unspecified vectors related to the "URL of a RSS feed of the user."  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2012-08-15  
Modified Date
2012-08-16  
Seq
2012-2770  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
223215 44475 CVE-2012-2770 [rt-announce] 20120725 Security vulnerabilities in three commonly deployed RT extensions  View
223216 44475 CVE-2012-2770 54681  View
223217 44475 CVE-2012-2770 authenexternalauth-url-sec-bypass(77213)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
28010 JVNDB-2012-003717 RT 用 Authen::ExternalAuth エクステンションにおけるログインセッションを取得される脆弱性 Best Practical Solutions RT 用 Authen::ExternalAuth エクステンションには、ログインセッションを取得される脆弱性が存在します。 CVE-2012-2770 56008 CVE-2012-2770 44475 5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003717.html 2012-07-25 2012-08-20 View