Vulnerability in Bestpractical Rt

CVE-2012-2770

The Authen::ExternalAuth extension before 0.11 for Best Practical Solutions RT allows remote attackers to obtain a logged-in session via unspecified vectors related to the "URL of a RSS feed of the user."

EPSS: 0.014 (68.9th percentile) — read the EPSS interpretation.

Affected products

Bestpractical Rt
Mike_peachey Authen\ — versions \
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

cve@mitre.org (vdb-entry, x_refsource_BID)
cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
cve@mitre.org (Vendor Advisory, mailing-list, x_refsource_MLIST, Patch)