NVD

Id
7998  
Name
CVE-2011-1008  
Description
Scrips_Overlay.pm in Best Practical Solutions RT before 3.8.9 does not properly restrict access to a TicketObj in a Scrip after a CurrentUser change, which allows remote authenticated users to obtain sensitive information via unspecified vectors, as demonstrated by custom-field value information, related to SQL logging.  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2011-02-28  
Modified Date
2011-03-10  
Seq
2011-1008  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
45475 7998 CVE-2011-1008 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=614576  View
45476 7998 CVE-2011-1008 [rt-announce] 20110216 RT 3.8.9 Released  View
45477 7998 CVE-2011-1008 [oss-security] 20110222 Re: CVE Request -- rt3 -- two issues: 1) Improper management of form data resubmittion upon user log out 2) SQL queries information leak by user account transition  View
45478 7998 CVE-2011-1008 [oss-security] 20110222 Re: CVE Request -- rt3 -- two issues: 1) Improper management of form data resubmittion upon user log out 2) SQL queries information leak by user account transition  View
45479 7998 CVE-2011-1008 [oss-security] 20110222 CVE Request -- rt3 -- two issues: 1) Improper management of form data resubmittion upon user log out 2) SQL queries information leak by user account transition  View
45480 7998 CVE-2011-1008 [oss-security] 20110223 Re: Re: CVE Request -- rt3 -- two issues: 1) Improper management of form data resubmittion upon user log out 2) SQL queries information leak by user account transition  View
45481 7998 CVE-2011-1008 [oss-security] 20110224 Re: Re: CVE Request -- rt3 -- two issues: 1) Improper management of form data resubmittion upon user log out 2) SQL queries information leak by user account transition  View
45482 7998 CVE-2011-1008 [oss-security] 20110224 Re: Re: CVE Request -- rt3 -- two issues: 1) Improper management of form data resubmittion upon user log out 2) SQL queries information leak by user account transition  View
45483 7998 CVE-2011-1008 [oss-security] 20110224 Re: Re: CVE Request -- rt3 -- two issues: 1) Improper management of form data resubmittion upon user log out 2) SQL queries information leak by user account transition  View
45484 7998 CVE-2011-1008 ADV-2011-0475  View
45485 7998 CVE-2011-1008 rt-scripsoverlay-information-disclosure(65772)  View
45486 7998 CVE-2011-1008 https://github.com/bestpractical/rt/commit/2338cd19ed7a7f4c1e94f639ab2789d6586d01f3  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
34051 JVNDB-2011-004293 Best Practical Solutions RT の Scrips_Overlay.pm における重要な情報を取得される脆弱性 Best Practical Solutions RT の Scrips_Overlay.pm には、CurrentUser 変更後に Scrip 内の TicketObj へのアクセスを適切に制限しないため、重要な情報を取得される脆弱性が存在します。 CVE-2011-1008 48915 CVE-2011-1008 7998 4 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004293.html 2011-02-28 2012-03-27 View