CVE-2011-4459
First published: Mon Jun 04 2012(Updated: )
Best Practical Solutions RT 3.x before 3.8.12 and 4.x before 4.0.6 does not properly disable groups, which allows remote authenticated users to bypass intended access restrictions in opportunistic circumstances by leveraging a group membership.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Best Practical Solutions Request Tracker | =3.8.7 | |
| Best Practical Solutions Request Tracker | =3.5.5 | |
| Best Practical Solutions Request Tracker | =3.0.4 | |
| Best Practical Solutions Request Tracker | =3.2.1-rc1 | |
| Best Practical Solutions Request Tracker | =3.6.0-pre1 | |
| Best Practical Solutions Request Tracker | =3.8.9-rc2 | |
| Best Practical Solutions Request Tracker | =3.4.0-rc2 | |
| Best Practical Solutions Request Tracker | =3.0.8 | |
| Best Practical Solutions Request Tracker | =3.8.11 | |
| Best Practical Solutions Request Tracker | =3.4.2-rc2 | |
| Best Practical Solutions Request Tracker | =3.6.4-rc2 | |
| Best Practical Solutions Request Tracker | =3.8.8-rc2 | |
| Best Practical Solutions Request Tracker | =3.2.1-rc3 | |
| Best Practical Solutions Request Tracker | =3.8.9-rc1 | |
| Best Practical Solutions Request Tracker | =3.2.0-rc4 | |
| Best Practical Solutions Request Tracker | =3.1.2 | |
| Best Practical Solutions Request Tracker | =3.4.2-rc1 | |
| Best Practical Solutions Request Tracker | =3.6.6-rc1 | |
| Best Practical Solutions Request Tracker | =3.4.5 | |
| Best Practical Solutions Request Tracker | =3.0.2 | |
| Best Practical Solutions Request Tracker | =3.5.4 | |
| Best Practical Solutions Request Tracker | =3.6.7 | |
| Best Practical Solutions Request Tracker | =3.0.10-rc1 | |
| Best Practical Solutions Request Tracker | =3.6.2 | |
| Best Practical Solutions Request Tracker | =3.4.5-rc2 | |
| Best Practical Solutions Request Tracker | =3.2.2 | |
| Best Practical Solutions Request Tracker | =3.6.3 | |
| Best Practical Solutions Request Tracker | =3.1.6 | |
| Best Practical Solutions Request Tracker | =3.0.11 | |
| Best Practical Solutions Request Tracker | =3.8.2 | |
| Best Practical Solutions Request Tracker | =3.8.8-rc4 | |
| Best Practical Solutions Request Tracker | =3.6.2-rc1 | |
| Best Practical Solutions Request Tracker | =3.1.11 | |
| Best Practical Solutions Request Tracker | =3.6.0-pre0 | |
| Best Practical Solutions Request Tracker | =3.1.10 | |
| Best Practical Solutions Request Tracker | =3.0.10-pre2 | |
| Best Practical Solutions Request Tracker | =3.6.5-rc1 | |
| Best Practical Solutions Request Tracker | =3.6.0 | |
| Best Practical Solutions Request Tracker | =3.6.6-rc2 | |
| Best Practical Solutions Request Tracker | =3.8.0 | |
| Best Practical Solutions Request Tracker | =3.4.0-rc5 | |
| Best Practical Solutions Request Tracker | =3.4.0 | |
| Best Practical Solutions Request Tracker | =3.6.3-rc4 | |
| Best Practical Solutions Request Tracker | =3.8.1-rc1 | |
| Best Practical Solutions Request Tracker | =3.8.10 | |
| Best Practical Solutions Request Tracker | =3.1.7 | |
| Best Practical Solutions Request Tracker | =3.4.4-pre2 | |
| Best Practical Solutions Request Tracker | =3.8.3-rc1 | |
| Best Practical Solutions Request Tracker | =3.8.9 | |
| Best Practical Solutions Request Tracker | =3.1.13 | |
| Best Practical Solutions Request Tracker | =3.4.7-rc1 | |
| Best Practical Solutions Request Tracker | =3.4.0-rc3 | |
| Best Practical Solutions Request Tracker | =3.6.5-rc2 | |
| Best Practical Solutions Request Tracker | =3.8.2-rc2 | |
| Best Practical Solutions Request Tracker | =3.8.0-rc1 | |
| Best Practical Solutions Request Tracker | =3.4.0-rc4 | |
| Best Practical Solutions Request Tracker | =3.0.10 | |
| Best Practical Solutions Request Tracker | =3.8.8-rc3 | |
| Best Practical Solutions Request Tracker | =3.8.2-rc1 | |
| Best Practical Solutions Request Tracker | =3.6.10 | |
| Best Practical Solutions Request Tracker | =3.0.10-pre1 | |
| Best Practical Solutions Request Tracker | =3.1.16 | |
| Best Practical Solutions Request Tracker | =3.2.3 | |
| Best Practical Solutions Request Tracker | =3.2.2-rc1 | |
| Best Practical Solutions Request Tracker | =3.6.3-rc2 | |
| Best Practical Solutions Request Tracker | =3.5.3 | |
| Best Practical Solutions Request Tracker | =3.0.5 | |
| Best Practical Solutions Request Tracker | =3.2.0 | |
| Best Practical Solutions Request Tracker | =3.8.9-rc3 | |
| Best Practical Solutions Request Tracker | =3.0.0 | |
| Best Practical Solutions Request Tracker | =3.4.6 | |
| Best Practical Solutions Request Tracker | =3.0.3 | |
| Best Practical Solutions Request Tracker | =3.4.3 | |
| Best Practical Solutions Request Tracker | =3.6.9 | |
| Best Practical Solutions Request Tracker | =3.6.6 | |
| Best Practical Solutions Request Tracker | =3.6.1-rc2 | |
| Best Practical Solutions Request Tracker | =3.6.5 | |
| Best Practical Solutions Request Tracker | =3.8.1-rc3 | |
| Best Practical Solutions Request Tracker | =3.4.3-rc2 | |
| Best Practical Solutions Request Tracker | =3.4.0-rc6 | |
| Best Practical Solutions Request Tracker | =3.6.2-rc3 | |
| Best Practical Solutions Request Tracker | =3.4.5-pre1 | |
| Best Practical Solutions Request Tracker | =3.8.4-rc1 | |
| Best Practical Solutions Request Tracker | =3.0.1 | |
| Best Practical Solutions Request Tracker | =3.8.1-rc4 | |
| Best Practical Solutions Request Tracker | =3.4.4-pre3 | |
| Best Practical Solutions Request Tracker | =3.2.1 | |
| Best Practical Solutions Request Tracker | =3.8.5 | |
| Best Practical Solutions Request Tracker | =3.6.6-rc3 | |
| Best Practical Solutions Request Tracker | =3.2.3-rc2 | |
| Best Practical Solutions Request Tracker | =3.4.4 | |
| Best Practical Solutions Request Tracker | =3.0.11-rc4 | |
| Best Practical Solutions Request Tracker | =3.5.6 | |
| Best Practical Solutions Request Tracker | =3.6.4-rc1 | |
| Best Practical Solutions Request Tracker | =3.6.8 | |
| Best Practical Solutions Request Tracker | =3.0.6 | |
| Best Practical Solutions Request Tracker | =3.2.1-rc2 | |
| Best Practical Solutions Request Tracker | =3.8.1-rc5 | |
| Best Practical Solutions Request Tracker | =3.1.8 | |
| Best Practical Solutions Request Tracker | =3.4.6-rc2 | |
| Best Practical Solutions Request Tracker | =3.4.3-rc1 | |
| Best Practical Solutions Request Tracker | =3.6.3-rc1 | |
| Best Practical Solutions Request Tracker | =3.6.0-rc1 | |
| Best Practical Solutions Request Tracker | =3.8.6-rc1 | |
| Best Practical Solutions Request Tracker | =3.2.0-rc2 | |
| Best Practical Solutions Request Tracker | =3.1.12 | |
| Best Practical Solutions Request Tracker | =3.1.5 | |
| Best Practical Solutions Request Tracker | =3.8.8 | |
| Best Practical Solutions Request Tracker | =3.8.0-rc3 | |
| Best Practical Solutions Request Tracker | =3.8.0-rc2 | |
| Best Practical Solutions Request Tracker | =3.2.0-rc1 | |
| Best Practical Solutions Request Tracker | =3.1.17 | |
| Best Practical Solutions Request Tracker | =3.0.7 | |
| Best Practical Solutions Request Tracker | =3.2.0-rc3 | |
| Best Practical Solutions Request Tracker | =3.7.86 | |
| Best Practical Solutions Request Tracker | =3.0.7.1 | |
| Best Practical Solutions Request Tracker | =3.6.3-rc3 | |
| Best Practical Solutions Request Tracker | =3.7.80 | |
| Best Practical Solutions Request Tracker | =3.1.15 | |
| Best Practical Solutions Request Tracker | =3.0.12 | |
| Best Practical Solutions Request Tracker | =3.6.2-rc4 | |
| Best Practical Solutions Request Tracker | =3.0.9 | |
| Best Practical Solutions Request Tracker | =3.4.4-pre1 | |
| Best Practical Solutions Request Tracker | =3.8.3 | |
| Best Practical Solutions Request Tracker | =3.7.1 | |
| Best Practical Solutions Request Tracker | =3.1.3 | |
| Best Practical Solutions Request Tracker | =3.6.1 | |
| Best Practical Solutions Request Tracker | =3.4.0-rc1 | |
| Best Practical Solutions Request Tracker | =3.4.1 | |
| Best Practical Solutions Request Tracker | =3.4.5-rc1 | |
| Best Practical Solutions Request Tracker | =3.2.3-rc1 | |
| Best Practical Solutions Request Tracker | =3.8.6 | |
| Best Practical Solutions Request Tracker | =3.6.4 | |
| Best Practical Solutions Request Tracker | =3.5.7 | |
| Best Practical Solutions Request Tracker | =3.6.0-rc3 | |
| Best Practical Solutions Request Tracker | =3.8.1 | |
| Best Practical Solutions Request Tracker | =3.8.4 | |
| Best Practical Solutions Request Tracker | =3.7.5 | |
| Best Practical Solutions Request Tracker | =3.8.1-rc2 | |
| Best Practical Solutions Request Tracker | =3.7.85 | |
| Best Practical Solutions Request Tracker | =3.6.1-rc1 | |
| Best Practical Solutions Request Tracker | =3.8.3-rc2 | |
| Best Practical Solutions Request Tracker | =3.6.2-rc5 | |
| Best Practical Solutions Request Tracker | =3.4.6-rc1 | |
| Best Practical Solutions Request Tracker | =3.6.1-pre2 | |
| Best Practical Solutions Request Tracker | =3.0.11-rc2 | |
| Best Practical Solutions Request Tracker | =3.2.1-rc4 | |
| Best Practical Solutions Request Tracker | =3.5.2 | |
| Best Practical Solutions Request Tracker | =3.6.0-rc2 | |
| Best Practical Solutions Request Tracker | =3.1.4 | |
| Best Practical Solutions Request Tracker | =3.0.11-rc3 | |
| Best Practical Solutions Request Tracker | =3.8.7-rc1 | |
| Best Practical Solutions Request Tracker | =3.1.14 | |
| Best Practical Solutions Request Tracker | =3.4.2 | |
| Best Practical Solutions Request Tracker | =3.5.1 | |
| Best Practical Solutions Request Tracker | =4.0.0-rc4 | |
| Best Practical Solutions Request Tracker | =4.0.3 | |
| Best Practical Solutions Request Tracker | =4.0.0-rc7 | |
| Best Practical Solutions Request Tracker | =4.0.1 | |
| Best Practical Solutions Request Tracker | =4.0.0-rc3 | |
| Best Practical Solutions Request Tracker | =4.0.0-rc8 | |
| Best Practical Solutions Request Tracker | =4.0.0-rc6 | |
| Best Practical Solutions Request Tracker | =4.0.0-rc5 | |
| Best Practical Solutions Request Tracker | =4.0.4 | |
| Best Practical Solutions Request Tracker | =4.0.0-rc2 | |
| Best Practical Solutions Request Tracker | =4.0.0 | |
| Best Practical Solutions Request Tracker | =3.8.12 | |
| Best Practical Solutions Request Tracker | =4.0.2 | |
| Best Practical Solutions Request Tracker | =4.0.0-rc1 | |
| Best Practical Solutions Request Tracker | =4.0.5 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2011-4459?
The severity of CVE-2011-4459 is classified as moderate, as it allows authenticated users to bypass intended access restrictions.
How do I fix CVE-2011-4459?
To fix CVE-2011-4459, upgrade your Best Practical Solutions RT installation to version 3.8.12 or 4.0.6 or later.
What versions are affected by CVE-2011-4459?
CVE-2011-4459 affects Best Practical Solutions RT versions 3.8.7 through 3.8.11 and 4.0.0 through 4.0.5.
What impact does CVE-2011-4459 have on users?
CVE-2011-4459 allows remote authenticated users to exploit group memberships, leading to unauthorized access to restricted functionalities.
Is CVE-2011-4459 a remote or local vulnerability?
CVE-2011-4459 is considered a remote vulnerability as it can be exploited by authenticated users accessing the server from a remote location.
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/author
- agent/remedy
- agent/weakness
- agent/references
- agent/last-modified-date
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/bestpractical
- canonical/best practical solutions request tracker
- version/best practical solutions request tracker/3.8.7
- version/best practical solutions request tracker/3.5.5
- version/best practical solutions request tracker/3.0.4
- version/best practical solutions request tracker/3.2.1-rc1
- version/best practical solutions request tracker/3.6.0-pre1
- version/best practical solutions request tracker/3.8.9-rc2
- version/best practical solutions request tracker/3.4.0-rc2
- version/best practical solutions request tracker/3.0.8
- version/best practical solutions request tracker/3.8.11
- version/best practical solutions request tracker/3.4.2-rc2
- version/best practical solutions request tracker/3.6.4-rc2
- version/best practical solutions request tracker/3.8.8-rc2
- version/best practical solutions request tracker/3.2.1-rc3
- version/best practical solutions request tracker/3.8.9-rc1
- version/best practical solutions request tracker/3.2.0-rc4
- version/best practical solutions request tracker/3.1.2
- version/best practical solutions request tracker/3.4.2-rc1
- version/best practical solutions request tracker/3.6.6-rc1
- version/best practical solutions request tracker/3.4.5
- version/best practical solutions request tracker/3.0.2
- version/best practical solutions request tracker/3.5.4
- version/best practical solutions request tracker/3.6.7
- version/best practical solutions request tracker/3.0.10-rc1
- version/best practical solutions request tracker/3.6.2
- version/best practical solutions request tracker/3.4.5-rc2
- version/best practical solutions request tracker/3.2.2
- version/best practical solutions request tracker/3.6.3
- version/best practical solutions request tracker/3.1.6
- version/best practical solutions request tracker/3.0.11
- version/best practical solutions request tracker/3.8.2
- version/best practical solutions request tracker/3.8.8-rc4
- version/best practical solutions request tracker/3.6.2-rc1
- version/best practical solutions request tracker/3.1.11
- version/best practical solutions request tracker/3.6.0-pre0
- version/best practical solutions request tracker/3.1.10
- version/best practical solutions request tracker/3.0.10-pre2
- version/best practical solutions request tracker/3.6.5-rc1
- version/best practical solutions request tracker/3.6.0
- version/best practical solutions request tracker/3.6.6-rc2
- version/best practical solutions request tracker/3.8.0
- version/best practical solutions request tracker/3.4.0-rc5
- version/best practical solutions request tracker/3.4.0
- version/best practical solutions request tracker/3.6.3-rc4
- version/best practical solutions request tracker/3.8.1-rc1
- version/best practical solutions request tracker/3.8.10
- version/best practical solutions request tracker/3.1.7
- version/best practical solutions request tracker/3.4.4-pre2
- version/best practical solutions request tracker/3.8.3-rc1
- version/best practical solutions request tracker/3.8.9
- version/best practical solutions request tracker/3.1.13
- version/best practical solutions request tracker/3.4.7-rc1
- version/best practical solutions request tracker/3.4.0-rc3
- version/best practical solutions request tracker/3.6.5-rc2
- version/best practical solutions request tracker/3.8.2-rc2
- version/best practical solutions request tracker/3.8.0-rc1
- version/best practical solutions request tracker/3.4.0-rc4
- version/best practical solutions request tracker/3.0.10
- version/best practical solutions request tracker/3.8.8-rc3
- version/best practical solutions request tracker/3.8.2-rc1
- version/best practical solutions request tracker/3.6.10
- version/best practical solutions request tracker/3.0.10-pre1
- version/best practical solutions request tracker/3.1.16
- version/best practical solutions request tracker/3.2.3
- version/best practical solutions request tracker/3.2.2-rc1
- version/best practical solutions request tracker/3.6.3-rc2
- version/best practical solutions request tracker/3.5.3
- version/best practical solutions request tracker/3.0.5
- version/best practical solutions request tracker/3.2.0
- version/best practical solutions request tracker/3.8.9-rc3
- version/best practical solutions request tracker/3.0.0
- version/best practical solutions request tracker/3.4.6
- version/best practical solutions request tracker/3.0.3
- version/best practical solutions request tracker/3.4.3
- version/best practical solutions request tracker/3.6.9
- version/best practical solutions request tracker/3.6.6
- version/best practical solutions request tracker/3.6.1-rc2
- version/best practical solutions request tracker/3.6.5
- version/best practical solutions request tracker/3.8.1-rc3
- version/best practical solutions request tracker/3.4.3-rc2
- version/best practical solutions request tracker/3.4.0-rc6
- version/best practical solutions request tracker/3.6.2-rc3
- version/best practical solutions request tracker/3.4.5-pre1
- version/best practical solutions request tracker/3.8.4-rc1
- version/best practical solutions request tracker/3.0.1
- version/best practical solutions request tracker/3.8.1-rc4
- version/best practical solutions request tracker/3.4.4-pre3
- version/best practical solutions request tracker/3.2.1
- version/best practical solutions request tracker/3.8.5
- version/best practical solutions request tracker/3.6.6-rc3
- version/best practical solutions request tracker/3.2.3-rc2
- version/best practical solutions request tracker/3.4.4
- version/best practical solutions request tracker/3.0.11-rc4
- version/best practical solutions request tracker/3.5.6
- version/best practical solutions request tracker/3.6.4-rc1
- version/best practical solutions request tracker/3.6.8
- version/best practical solutions request tracker/3.0.6
- version/best practical solutions request tracker/3.2.1-rc2
- version/best practical solutions request tracker/3.8.1-rc5
- version/best practical solutions request tracker/3.1.8
- version/best practical solutions request tracker/3.4.6-rc2
- version/best practical solutions request tracker/3.4.3-rc1
- version/best practical solutions request tracker/3.6.3-rc1
- version/best practical solutions request tracker/3.6.0-rc1
- version/best practical solutions request tracker/3.8.6-rc1
- version/best practical solutions request tracker/3.2.0-rc2
- version/best practical solutions request tracker/3.1.12
- version/best practical solutions request tracker/3.1.5
- version/best practical solutions request tracker/3.8.8
- version/best practical solutions request tracker/3.8.0-rc3
- version/best practical solutions request tracker/3.8.0-rc2
- version/best practical solutions request tracker/3.2.0-rc1
- version/best practical solutions request tracker/3.1.17
- version/best practical solutions request tracker/3.0.7
- version/best practical solutions request tracker/3.2.0-rc3
- version/best practical solutions request tracker/3.7.86
- version/best practical solutions request tracker/3.0.7.1
- version/best practical solutions request tracker/3.6.3-rc3
- version/best practical solutions request tracker/3.7.80
- version/best practical solutions request tracker/3.1.15
- version/best practical solutions request tracker/3.0.12
- version/best practical solutions request tracker/3.6.2-rc4
- version/best practical solutions request tracker/3.0.9
- version/best practical solutions request tracker/3.4.4-pre1
- version/best practical solutions request tracker/3.8.3
- version/best practical solutions request tracker/3.7.1
- version/best practical solutions request tracker/3.1.3
- version/best practical solutions request tracker/3.6.1
- version/best practical solutions request tracker/3.4.0-rc1
- version/best practical solutions request tracker/3.4.1
- version/best practical solutions request tracker/3.4.5-rc1
- version/best practical solutions request tracker/3.2.3-rc1
- version/best practical solutions request tracker/3.8.6
- version/best practical solutions request tracker/3.6.4
- version/best practical solutions request tracker/3.5.7
- version/best practical solutions request tracker/3.6.0-rc3
- version/best practical solutions request tracker/3.8.1
- version/best practical solutions request tracker/3.8.4
- version/best practical solutions request tracker/3.7.5
- version/best practical solutions request tracker/3.8.1-rc2
- version/best practical solutions request tracker/3.7.85
- version/best practical solutions request tracker/3.6.1-rc1
- version/best practical solutions request tracker/3.8.3-rc2
- version/best practical solutions request tracker/3.6.2-rc5
- version/best practical solutions request tracker/3.4.6-rc1
- version/best practical solutions request tracker/3.6.1-pre2
- version/best practical solutions request tracker/3.0.11-rc2
- version/best practical solutions request tracker/3.2.1-rc4
- version/best practical solutions request tracker/3.5.2
- version/best practical solutions request tracker/3.6.0-rc2
- version/best practical solutions request tracker/3.1.4
- version/best practical solutions request tracker/3.0.11-rc3
- version/best practical solutions request tracker/3.8.7-rc1
- version/best practical solutions request tracker/3.1.14
- version/best practical solutions request tracker/3.4.2
- version/best practical solutions request tracker/3.5.1
- version/best practical solutions request tracker/4.0.0-rc4
- version/best practical solutions request tracker/4.0.3
- version/best practical solutions request tracker/4.0.0-rc7
- version/best practical solutions request tracker/4.0.1
- version/best practical solutions request tracker/4.0.0-rc3
- version/best practical solutions request tracker/4.0.0-rc8
- version/best practical solutions request tracker/4.0.0-rc6
- version/best practical solutions request tracker/4.0.0-rc5
- version/best practical solutions request tracker/4.0.4
- version/best practical solutions request tracker/4.0.0-rc2
- version/best practical solutions request tracker/4.0.0
- version/best practical solutions request tracker/3.8.12
- version/best practical solutions request tracker/4.0.2
- version/best practical solutions request tracker/4.0.0-rc1
- version/best practical solutions request tracker/4.0.5