CVE-2012-4731: Medium severity best practical solutions request tracker vulnerability
Published Nov 11, 2012
·Updated
FAQ manager for Request Tracker (RTFM) before 2.4.5 does not properly check user rights, which allows remote authenticated users to create arbitrary articles in arbitrary classes via unknown vectors.
Affected Software
7 affected components
bestpractical Rtfm<=2.4.3
bestpractical Rtfm=2.2.0
bestpractical Rtfm=2.2.1
bestpractical Rtfm=2.2.2
bestpractical Rtfm=2.4.0
bestpractical Rtfm=2.4.1
bestpractical Rtfm=2.4.2
Event History
Nov 11, 2012
CVE Published
via MITRE·11:00 AM
Data Sourced
via MITRE·11:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-4731?
CVE-2012-4731 is considered a medium severity vulnerability due to improper user rights management.
2
How do I fix CVE-2012-4731?
To fix CVE-2012-4731, upgrade to RTFM version 2.4.5 or later.
3
What are the affected versions of RTFM for CVE-2012-4731?
Affected versions include RTFM versions 2.2.0 to 2.4.3.
4
Can remote users exploit CVE-2012-4731?
Yes, remote authenticated users can exploit CVE-2012-4731 to create arbitrary articles.
5
What is the impact of CVE-2012-4731?
The impact of CVE-2012-4731 allows unauthorized modification of content in the system, potentially leading to information disclosure.