6.4
CVE-2015-1464
- EPSS 0.35%
- Published 09.03.2015 14:59:06
- Last modified 12.04.2025 10:46:40
- Source cve@mitre.org
- Teams watchlist Login
- Open Login
RT (aka Request Tracker) before 4.0.23 and 4.2.x before 4.2.10 allows remote attackers to hijack sessions via an RSS feed URL.
Data is provided by the National Vulnerability Database (NVD)
Fedoraproject ≫ Fedora Version21
Fedoraproject ≫ Fedora Version22
Bestpractical ≫ Request Tracker Version <= 4.0.22
Bestpractical ≫ Request Tracker Version4.2.0
Bestpractical ≫ Request Tracker Version4.2.1
Bestpractical ≫ Request Tracker Version4.2.2
Bestpractical ≫ Request Tracker Version4.2.3
Bestpractical ≫ Request Tracker Version4.2.4
Bestpractical ≫ Request Tracker Version4.2.5
Bestpractical ≫ Request Tracker Version4.2.6
Bestpractical ≫ Request Tracker Version4.2.7
Bestpractical ≫ Request Tracker Version4.2.8
Bestpractical ≫ Request Tracker Version4.2.9
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.35% | 0.565 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 6.4 | 10 | 4.9 |
AV:N/AC:L/Au:N/C:P/I:P/A:N
|
CWE-284 Improper Access Control
The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.