CVE-2015-1165: Infoleak
Published Mar 9, 2015
·Updated
RT (aka Request Tracker) 3.8.8 through 4.x before 4.0.23 and 4.2.x before 4.2.10 allows remote attackers to obtain sensitive RSS feed URLs and ticket data via unspecified vectors.
Affected Software
46 affected components
Debian Debian Linux=7.0
Fedoraproject Fedora=21
Fedoraproject Fedora=22
bestpractical Request Tracker=3.8.8
bestpractical Request Tracker=3.8.9
bestpractical Request Tracker=3.8.10
bestpractical Request Tracker=3.8.11
bestpractical Request Tracker=3.8.12
bestpractical Request Tracker=3.8.13
bestpractical Request Tracker=3.8.14
bestpractical Request Tracker=3.8.15
bestpractical Request Tracker=3.8.16
bestpractical Request Tracker=3.8.17
bestpractical Request Tracker=4.0.0
bestpractical Request Tracker=4.0.1
bestpractical Request Tracker=4.0.2
bestpractical Request Tracker=4.0.3
bestpractical Request Tracker=4.0.4
bestpractical Request Tracker=4.0.5
bestpractical Request Tracker=4.0.6
bestpractical Request Tracker=4.0.7
bestpractical Request Tracker=4.0.8
bestpractical Request Tracker=4.0.9
bestpractical Request Tracker=4.0.10
bestpractical Request Tracker=4.0.11
bestpractical Request Tracker=4.0.12
bestpractical Request Tracker=4.0.13
bestpractical Request Tracker=4.0.14
bestpractical Request Tracker=4.0.15
bestpractical Request Tracker=4.0.16
bestpractical Request Tracker=4.0.17
bestpractical Request Tracker=4.0.18
bestpractical Request Tracker=4.0.19
bestpractical Request Tracker=4.0.20
bestpractical Request Tracker=4.0.21
bestpractical Request Tracker=4.0.22
bestpractical Request Tracker=4.2.0
bestpractical Request Tracker=4.2.1
bestpractical Request Tracker=4.2.2
bestpractical Request Tracker=4.2.3
bestpractical Request Tracker=4.2.4
bestpractical Request Tracker=4.2.5
bestpractical Request Tracker=4.2.6
bestpractical Request Tracker=4.2.7
bestpractical Request Tracker=4.2.8
bestpractical Request Tracker=4.2.9
Event History
Mar 9, 2015
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-1165?
CVE-2015-1165 has been rated as a moderate severity vulnerability.
2
How do I fix CVE-2015-1165?
To fix CVE-2015-1165, upgrade to Request Tracker version 4.0.23 or higher, or 4.2.10 or higher.
3
Which versions of Request Tracker are affected by CVE-2015-1165?
CVE-2015-1165 affects Request Tracker versions 3.8.8 through 4.x before 4.0.23 and 4.2.x before 4.2.10.
4
Can CVE-2015-1165 lead to data exposure?
Yes, CVE-2015-1165 allows remote attackers to obtain sensitive RSS feed URLs and ticket data.
5
What kind of attacks can CVE-2015-1165 facilitate?
CVE-2015-1165 can facilitate unauthorized access to sensitive information exposed in RSS feeds.