CVE-2012-4730 Other in n/a
Authenticated users can inject email headers to conduct phishing attacks or leak sensitive information in Request Tracker.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2012-4730?
CVE-2012-4730 is a low-severity vulnerability in n/a, published on 11 Nov 2012. Any signed-in user can exploit it over the network, and only if a user opens a file or follows a link.
Official description
Request Tracker (RT) 3.8.x before 3.8.15 and 4.0.x before 4.0.8 allows remote authenticated users with ModifySelf or AdminUser privileges to inject arbitrary email headers and conduct phishing attacks or obtain sensitive information via unknown vectors.
Weakness: CWE-264
Which versions are affected by CVE-2012-4730?
It affects 1 product.
Products include Bestpractical Rt.
How do I fix CVE-2012-4730?
Upgrade to a fixed version.
Is CVE-2012-4730 being exploited?
There is no known exploitation of CVE-2012-4730 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as DEBIAN-CVE-2012-4730, GHSA-53rc-933r-8227.