4.3
CVE-2011-1690
- EPSS 2.36%
- Veröffentlicht 22.04.2011 10:55:02
- Zuletzt bearbeitet 16.06.2026 23:29:50
- Erkennungen
Best Practical Solutions RT 3.6.0 through 3.6.10 and 3.8.0 through 3.8.8 allows remote attackers to trick users into sending credentials to an arbitrary server via unspecified vectors.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Bestpractical ≫ Rt Version 3.6.0
Bestpractical ≫ Rt Version 3.6.1
Bestpractical ≫ Rt Version 3.6.2
Bestpractical ≫ Rt Version 3.6.3
Bestpractical ≫ Rt Version 3.6.4
Bestpractical ≫ Rt Version 3.6.5
Bestpractical ≫ Rt Version 3.6.6
Bestpractical ≫ Rt Version 3.6.7
Bestpractical ≫ Rt Version 3.6.8
Bestpractical ≫ Rt Version 3.6.9
Bestpractical ≫ Rt Version 3.6.10
Bestpractical ≫ Rt Version 3.8.0
Bestpractical ≫ Rt Version 3.8.1
Bestpractical ≫ Rt Version 3.8.2
Bestpractical ≫ Rt Version 3.8.3
Bestpractical ≫ Rt Version 3.8.4
Bestpractical ≫ Rt Version 3.8.5
Bestpractical ≫ Rt Version 3.8.6
Bestpractical ≫ Rt Version 3.8.6 Update rc1
Bestpractical ≫ Rt Version 3.8.7
Bestpractical ≫ Rt Version 3.8.7 Update rc1
Bestpractical ≫ Rt Version 3.8.8
Bestpractical ≫ Rt Version 3.8.8 Update rc2
Bestpractical ≫ Rt Version 3.8.8 Update rc3
Bestpractical ≫ Rt Version 3.8.8 Update rc4
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 2.36% | 0.816 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 4.3 | 8.6 | 2.9 |
AV:N/AC:M/Au:N/C:N/I:P/A:N
|
http://blog.bestpractical.com/2011/04/security-vulnerabilities-in-rt.html
http://lists.bestpractical.com/pipermail/rt-announce/2011-April/000187.html
http://lists.bestpractical.com/pipermail/rt-announce/2011-April/000188.html
http://secunia.com/advisories/44189
http://www.debian.org/security/2011/dsa-2220
http://www.securityfocus.com/bid/47383
http://www.vupen.com/english/advisories/2011/1071
https://bugzilla.redhat.com/show_bug.cgi?id=696795
http://lists.bestpractical.com/pipermail/rt-announce/2011-April/000189.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/66794