CVE-2017-5943: CSRF
Published Jul 3, 2017
·Updated
Request Tracker (RT) 4.x before 4.0.25, 4.2.x before 4.2.14, and 4.4.x before 4.4.2 allows remote attackers to obtain sensitive information about cross-site request forgery (CSRF) verification tokens via a crafted URL.
Affected Software
41 affected components
bestpractical Request Tracker=4.0.0
bestpractical Request Tracker=4.0.1
bestpractical Request Tracker=4.0.2
bestpractical Request Tracker=4.0.3
bestpractical Request Tracker=4.0.4
bestpractical Request Tracker=4.0.5
bestpractical Request Tracker=4.0.6
bestpractical Request Tracker=4.0.7
bestpractical Request Tracker=4.0.8
bestpractical Request Tracker=4.0.9
bestpractical Request Tracker=4.0.10
bestpractical Request Tracker=4.0.11
bestpractical Request Tracker=4.0.12
bestpractical Request Tracker=4.0.13
bestpractical Request Tracker=4.0.14
bestpractical Request Tracker=4.0.15
bestpractical Request Tracker=4.0.16
bestpractical Request Tracker=4.0.17
bestpractical Request Tracker=4.0.18
bestpractical Request Tracker=4.0.19
bestpractical Request Tracker=4.0.20
bestpractical Request Tracker=4.0.21
bestpractical Request Tracker=4.0.22
bestpractical Request Tracker=4.0.23
bestpractical Request Tracker=4.0.24
bestpractical Request Tracker=4.2.0
bestpractical Request Tracker=4.2.1
bestpractical Request Tracker=4.2.2
bestpractical Request Tracker=4.2.3
bestpractical Request Tracker=4.2.4
bestpractical Request Tracker=4.2.5
bestpractical Request Tracker=4.2.6
bestpractical Request Tracker=4.2.7
bestpractical Request Tracker=4.2.8
bestpractical Request Tracker=4.2.9
bestpractical Request Tracker=4.2.10
bestpractical Request Tracker=4.2.11
bestpractical Request Tracker=4.2.12
bestpractical Request Tracker=4.2.13
bestpractical Request Tracker=4.4.0
bestpractical Request Tracker=4.4.1
Event History
Jul 3, 2017
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-5943?
CVE-2017-5943 has been classified as a medium severity vulnerability.
2
How do I fix CVE-2017-5943?
To fix CVE-2017-5943, update Request Tracker to version 4.0.25, 4.2.14, 4.4.2 or later.
3
What type of vulnerability is CVE-2017-5943?
CVE-2017-5943 is a vulnerability that exposes sensitive information regarding CSRF verification tokens.
4
Which versions of Request Tracker are affected by CVE-2017-5943?
Request Tracker versions before 4.0.25, 4.2.14, and 4.4.2 are affected by CVE-2017-5943.
5
Can CVE-2017-5943 lead to further attacks?
Yes, CVE-2017-5943 could potentially lead to further attacks by exposing CSRF tokens which may be exploited.