CVE-2012-4733
EPSS 0.57%request-tracker4 - several
發布日:2013/8/23修改日:2026/4/28
描述
Request Tracker (RT) 4.x before 4.0.13 does not properly enforce the DeleteTicket and "custom lifecycle transition" permission, which allows remote authenticated users with the ModifyTicket permission to delete tickets via unspecified vectors.
受影響套件(2)
- Debian/request-tracker4from 0, < 4.0.12-2
- Debian/request-tracker4from 0, < 4.0.7-5+deb7u2