medium5.0
CVE-2012-2770
The Authen::ExternalAuth extension before 0.11 for Best Practical Solutions RT allows remote attackers to obtain a logged-in session via unspecified vectors re…
Impact
The Authen::ExternalAuth extension before 0.11 for Best Practical Solutions RT allows remote attackers to obtain a logged-in session via unspecified vectors related to the "URL of a RSS feed of the user."
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mike Peachey | Authen\ | through 0.08 Version \ |
Weakness classification
References
- NVD record
- CVE.org record
- http://lists.bestpractical.com/pipermail/rt-announce/2012-July/000208.html
- http://secunia.com/advisories/50060
- http://www.securityfocus.com/bid/54681
- https://exchange.xforce.ibmcloud.com/vulnerabilities/77213
- http://lists.bestpractical.com/pipermail/rt-announce/2012-July/000208.html
- http://secunia.com/advisories/50060
- http://www.securityfocus.com/bid/54681
- https://exchange.xforce.ibmcloud.com/vulnerabilities/77213