NetSight
IP …
high7.5

CVE-2021-38562

Best Practical Request Tracker (RT) 4.2 before 4.2.17, 4.4 before 4.4.5, and 5.0 before 5.0.2 allows sensitive information disclosure via a timing attack again…

Impact

Best Practical Request Tracker (RT) 4.2 before 4.2.17, 4.4 before 4.4.5, and 5.0 before 5.0.2 allows sensitive information disclosure via a timing attack against lib/RT/REST2/Middleware/Auth.pm.

Affected products

VendorProductAffected versions
BestpracticalRequest Tracker
from 4.2.0 before 4.2.17
from 4.4.0 before 4.4.5
from 5.0.0 before 5.0.2
FedoraprojectFedora
Version 35
DebianDebian Linux
Version 9.0

Weakness classification

CWE-203

References