CVE-2024-3262mediumCWE-200

CVE-2024-3262: falha de média gravidade em Best Practical Solutions Request Tracker

Information exposure vulnerability in Request Tracker (RT)

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Request Tracker+ Monitorar request-tracker4

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 5.5epss 0.3%
Information exposure vulnerability in RT software affecting version 4.4.1. This vulnerability allows an attacker with local access to the device to retrieve sensitive information about the application, such as vulnerability tickets, because the application stores the information in the browser cache, leading to information exposure despite session termination.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Produtos afetados
Best Practical Solutions · Request Tracker
CVEs relacionadas — Best Practical Solutions Request Tracker

No mesmo produto, das mais perigosas para as menos.

CVE-2026-105454MEDIUMStored XSS via crafted URLs in HTML ticket content in Request TrackerEPSS 0.4%CVE-2025-2545LOWDeprecated 3DES cryptographic algorithm used by Request Tracker in emails encrypted with S/MIMEEPSS 0.2%