CVE-2011-1690: Medium severity best practical solutions request tracker vulnerability
Published Apr 22, 2011
·Updated
Best Practical Solutions RT 3.6.0 through 3.6.10 and 3.8.0 through 3.8.8 allows remote attackers to trick users into sending credentials to an arbitrary server via unspecified vectors.
Affected Software
25 affected components
bestpractical RT=3.6.7
bestpractical RT=3.6.2
bestpractical RT=3.6.3
bestpractical RT=3.6.0
bestpractical RT=3.6.10
bestpractical RT=3.6.9
bestpractical RT=3.6.6
bestpractical RT=3.6.5
bestpractical RT=3.6.8
bestpractical RT=3.6.1
bestpractical RT=3.6.4
bestpractical RT=3.8.7
bestpractical RT=3.8.8-rc2
bestpractical RT=3.8.2
bestpractical RT=3.8.8-rc4
bestpractical RT=3.8.0
bestpractical RT=3.8.8-rc3
bestpractical RT=3.8.5
bestpractical RT=3.8.6-rc1
bestpractical RT=3.8.8
bestpractical RT=3.8.3
bestpractical RT=3.8.6
bestpractical RT=3.8.1
bestpractical RT=3.8.4
bestpractical RT=3.8.7-rc1
Remediation
Patch Available
Event History
Apr 22, 2011
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-1690?
CVE-2011-1690 is considered to be a high severity vulnerability due to its potential to allow remote attackers to capture user credentials.
2
How do I fix CVE-2011-1690?
To fix CVE-2011-1690, upgrade to a patched version of Best Practical Solutions RT that addresses this vulnerability.
3
What versions of RT are affected by CVE-2011-1690?
CVE-2011-1690 affects Best Practical Solutions RT versions 3.6.0 through 3.6.10 and 3.8.0 through 3.8.8.
4
What kind of attacks are possible with CVE-2011-1690?
CVE-2011-1690 can be exploited to trick users into sending their credentials to a malicious server.
5
Is CVE-2011-1690 a remote code execution vulnerability?
No, CVE-2011-1690 is not a remote code execution vulnerability but rather a credential theft vulnerability.