CVE-2015-1464: Medium severity red hat fedora vulnerability
Published Mar 9, 2015
·Updated
RT (aka Request Tracker) before 4.0.23 and 4.2.x before 4.2.10 allows remote attackers to hijack sessions via an RSS feed URL.
Affected Software
13 affected components
Fedoraproject Fedora=21
Fedoraproject Fedora=22
bestpractical Request Tracker<=4.0.22
bestpractical Request Tracker=4.2.0
bestpractical Request Tracker=4.2.1
bestpractical Request Tracker=4.2.2
bestpractical Request Tracker=4.2.3
bestpractical Request Tracker=4.2.4
bestpractical Request Tracker=4.2.5
bestpractical Request Tracker=4.2.6
bestpractical Request Tracker=4.2.7
bestpractical Request Tracker=4.2.8
bestpractical Request Tracker=4.2.9
Event History
Mar 9, 2015
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-1464?
CVE-2015-1464 is considered a moderate severity vulnerability that allows session hijacking.
2
How do I fix CVE-2015-1464?
To fix CVE-2015-1464, update Request Tracker to version 4.0.23 or 4.2.10 or later.
3
Which software versions are affected by CVE-2015-1464?
CVE-2015-1464 affects Request Tracker versions up to 4.0.22 and 4.2.x versions prior to 4.2.10, as well as specific Fedora versions.
4
Can CVE-2015-1464 be exploited remotely?
Yes, CVE-2015-1464 can be exploited remotely by attackers to hijack user sessions.
5
What impact does CVE-2015-1464 have on security?
CVE-2015-1464 can lead to unauthorized access to user accounts and sensitive information.