| Max CVSS | 4.3 | Min CVSS | 2.1 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2011-0009 | 4.3 |
Best Practical Solutions RT 3.x before 3.8.9rc2 and 4.x before 4.0.0rc4 uses the MD5 algorithm for password hashes, which makes it easier for context-dependent attackers to determine cleartext passwords via a brute-force attack on the database.
|
13-02-2023 - 03:22 | 25-01-2011 - 19:00 | |
| CVE-2011-1008 | 4.0 |
Scrips_Overlay.pm in Best Practical Solutions RT before 3.8.9 does not properly restrict access to a TicketObj in a Scrip after a CurrentUser change, which allows remote authenticated users to obtain sensitive information via unspecified vectors, as
|
25-02-2021 - 17:15 | 28-02-2011 - 16:00 | |
| CVE-2011-1007 | 2.1 |
Best Practical Solutions RT before 3.8.9 does not perform certain redirect actions upon a login, which allows physically proximate attackers to obtain credentials by resubmitting the login form via the back button of a web browser on an unattended wo
|
25-02-2021 - 17:15 | 28-02-2011 - 16:00 |