NetSight
IP …
medium4.0

CVE-2012-4731

FAQ manager for Request Tracker (RTFM) before 2.4.5 does not properly check user rights, which allows remote authenticated users to create arbitrary articles i…

Impact

FAQ manager for Request Tracker (RTFM) before 2.4.5 does not properly check user rights, which allows remote authenticated users to create arbitrary articles in arbitrary classes via unknown vectors.

Affected products

VendorProductAffected versions
BestpracticalRtfm
through 2.4.3
Versions 2.2.0, 2.2.1, 2.2.2, 2.4.0, 2.4.1

Weakness classification

CWE-264

References