CVE-2011-2084: Infoleak
Published Jun 4, 2012
·Updated
Best Practical Solutions RT 3.x before 3.8.12 and 4.x before 4.0.6 allows remote authenticated users to read (1) hashes of former passwords and (2) ticket correspondence history by leveraging access to a privileged account.
Affected Software
170 affected components
bestpractical RT=3.8.7
bestpractical RT=3.5.5
bestpractical RT=3.0.4
bestpractical RT=3.2.1-rc1
bestpractical RT=3.6.0-pre1
bestpractical RT=3.8.9-rc2
bestpractical RT=3.4.0-rc2
bestpractical RT=3.0.8
bestpractical RT=3.8.11
bestpractical RT=3.4.2-rc2
bestpractical RT=3.6.4-rc2
bestpractical RT=3.8.8-rc2
bestpractical RT=3.2.1-rc3
bestpractical RT=3.8.9-rc1
bestpractical RT=3.2.0-rc4
bestpractical RT=3.1.2
bestpractical RT=3.4.2-rc1
bestpractical RT=3.6.6-rc1
bestpractical RT=3.4.5
bestpractical RT=3.0.2
bestpractical RT=3.5.4
bestpractical RT=3.6.7
bestpractical RT=3.0.10-rc1
bestpractical RT=3.6.2
bestpractical RT=3.4.5-rc2
bestpractical RT=3.2.2
bestpractical RT=3.6.3
bestpractical RT=3.1.6
bestpractical RT=3.0.11
bestpractical RT=3.8.2
bestpractical RT=3.8.8-rc4
bestpractical RT=3.6.2-rc1
bestpractical RT=3.1.11
bestpractical RT=3.6.0-pre0
bestpractical RT=3.1.10
bestpractical RT=3.0.10-pre2
bestpractical RT=3.6.5-rc1
bestpractical RT=3.6.0
bestpractical RT=3.6.6-rc2
bestpractical RT=3.8.0
bestpractical RT=3.4.0-rc5
bestpractical RT=3.4.0
bestpractical RT=3.6.3-rc4
bestpractical RT=3.8.1-rc1
bestpractical RT=3.8.10
bestpractical RT=3.1.7
bestpractical RT=3.4.4-pre2
bestpractical RT=3.8.3-rc1
bestpractical RT=3.8.9
bestpractical RT=3.1.13
bestpractical RT=3.4.7-rc1
bestpractical RT=3.4.0-rc3
bestpractical RT=3.6.5-rc2
bestpractical RT=3.8.2-rc2
bestpractical RT=3.8.0-rc1
bestpractical RT=3.4.0-rc4
bestpractical RT=3.0.10
bestpractical RT=3.8.8-rc3
bestpractical RT=3.8.2-rc1
bestpractical RT=3.6.10
bestpractical RT=3.0.10-pre1
bestpractical RT=3.1.16
bestpractical RT=3.2.3
bestpractical RT=3.2.2-rc1
bestpractical RT=3.6.3-rc2
bestpractical RT=3.5.3
bestpractical RT=3.0.5
bestpractical RT=3.2.0
bestpractical RT=3.8.9-rc3
bestpractical RT=3.0.0
bestpractical RT=3.4.6
bestpractical RT=3.0.3
bestpractical RT=3.4.3
bestpractical RT=3.6.9
bestpractical RT=3.6.6
bestpractical RT=3.6.1-rc2
bestpractical RT=3.6.5
bestpractical RT=3.8.1-rc3
bestpractical RT=3.4.3-rc2
bestpractical RT=3.4.0-rc6
bestpractical RT=3.6.2-rc3
bestpractical RT=3.4.5-pre1
bestpractical RT=3.8.4-rc1
bestpractical RT=3.0.1
bestpractical RT=3.8.1-rc4
bestpractical RT=3.4.4-pre3
bestpractical RT=3.2.1
bestpractical RT=3.8.5
bestpractical RT=3.6.6-rc3
bestpractical RT=3.2.3-rc2
bestpractical RT=3.4.4
bestpractical RT=3.0.11-rc4
bestpractical RT=3.5.6
bestpractical RT=3.6.4-rc1
bestpractical RT=3.6.8
bestpractical RT=3.0.6
bestpractical RT=3.2.1-rc2
bestpractical RT=3.8.1-rc5
bestpractical RT=3.1.8
bestpractical RT=3.4.6-rc2
bestpractical RT=3.4.3-rc1
bestpractical RT=3.6.3-rc1
bestpractical RT=3.6.0-rc1
bestpractical RT=3.8.6-rc1
bestpractical RT=3.2.0-rc2
bestpractical RT=3.1.12
bestpractical RT=3.1.5
bestpractical RT=3.8.8
bestpractical RT=3.8.0-rc3
bestpractical RT=3.8.0-rc2
bestpractical RT=3.2.0-rc1
bestpractical RT=3.1.17
bestpractical RT=3.0.7
bestpractical RT=3.2.0-rc3
bestpractical RT=3.7.86
bestpractical RT=3.0.7.1
bestpractical RT=3.6.3-rc3
bestpractical RT=3.7.80
bestpractical RT=3.1.15
bestpractical RT=3.0.12
bestpractical RT=3.6.2-rc4
bestpractical RT=3.0.9
bestpractical RT=3.4.4-pre1
bestpractical RT=3.8.3
bestpractical RT=3.7.1
bestpractical RT=3.1.3
bestpractical RT=3.6.1
bestpractical RT=3.4.0-rc1
bestpractical RT=3.4.1
bestpractical RT=3.4.5-rc1
bestpractical RT=3.2.3-rc1
bestpractical RT=3.8.6
bestpractical RT=3.6.4
bestpractical RT=3.5.7
bestpractical RT=3.6.0-rc3
bestpractical RT=3.8.1
bestpractical RT=3.8.4
bestpractical RT=3.7.5
bestpractical RT=3.8.1-rc2
bestpractical RT=3.7.85
bestpractical RT=3.6.1-rc1
bestpractical RT=3.8.3-rc2
bestpractical RT=3.6.2-rc5
bestpractical RT=3.4.6-rc1
bestpractical RT=3.6.1-pre2
bestpractical RT=3.0.11-rc2
bestpractical RT=3.2.1-rc4
bestpractical RT=3.5.2
bestpractical RT=3.6.0-rc2
bestpractical RT=3.1.4
bestpractical RT=3.0.11-rc3
bestpractical RT=3.8.7-rc1
bestpractical RT=3.1.14
bestpractical RT=3.4.2
bestpractical RT=3.5.1
bestpractical RT=4.0.0-rc4
bestpractical RT=4.0.3
bestpractical RT=4.0.0-rc7
bestpractical RT=4.0.1
bestpractical RT=4.0.0-rc3
bestpractical RT=4.0.0-rc8
bestpractical RT=4.0.0-rc6
bestpractical RT=4.0.0-rc5
bestpractical RT=4.0.4
bestpractical RT=4.0.0-rc2
bestpractical RT=4.0.0
bestpractical RT=3.8.12
bestpractical RT=4.0.2
bestpractical RT=4.0.0-rc1
bestpractical RT=4.0.5
Remediation
Event History
Jun 4, 2012
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-2084?
CVE-2011-2084 is classified as a moderate severity vulnerability.
2
How do I fix CVE-2011-2084?
To fix CVE-2011-2084, upgrade to Best Practical Solutions RT version 3.8.12 or 4.0.6 or later.
3
Which versions are affected by CVE-2011-2084?
CVE-2011-2084 affects Best Practical Solutions RT versions 3.x before 3.8.12 and 4.x before 4.0.6.
4
What type of vulnerability is CVE-2011-2084?
CVE-2011-2084 is a vulnerability that allows remote authenticated users to read sensitive information.
5
Who is impacted by CVE-2011-2084?
Users with privileged accounts in affected versions of Best Practical Solutions RT are at risk due to CVE-2011-2084.