CVE-2011-1008

Published: Feb 28, 2011Modified: Apr 29, 2026

4.0

Vector

AV:N/AC:L/Au:S/C:P/I:N/A:N

Exploitability: 8.0 / Impact: 2.9

Source: NVD

Description

Scrips_Overlay.pm in Best Practical Solutions RT before 3.8.9 does not properly restrict access to a TicketObj in a Scrip after a CurrentUser change, which allows remote authenticated users to obtain sensitive information via unspecified vectors, as demonstrated by custom-field value information, related to SQL logging.

Affected (76)

Products: Bestpractical: Rt

Bestpractical

1 product

Configuration A

76 vulnerable

Vulnerable Software	Affected Versions
Bestpractical Rt	Up to 3.8.9
Bestpractical Rt	Version 1.0.0
Bestpractical Rt	Version 1.0.1
Bestpractical Rt	Version 1.0.2
Bestpractical Rt	Version 1.0.3
Bestpractical Rt	Version 1.0.4
Bestpractical Rt	Version 1.0.5
Bestpractical Rt	Version 1.0.6
Bestpractical Rt	Version 1.0.7
Bestpractical Rt	Version 2.0.0
Bestpractical Rt	Version 2.0.11
Bestpractical Rt	Version 2.0.12
Bestpractical Rt	Version 2.0.13
Bestpractical Rt	Version 2.0.14
Bestpractical Rt	Version 2.0.15
Bestpractical Rt	Version 2.0.1
Bestpractical Rt	Version 2.0.2
Bestpractical Rt	Version 2.0.3
Bestpractical Rt	Version 2.0.4
Bestpractical Rt	Version 2.0.5.1
Bestpractical Rt	Version 2.0.5.3
Bestpractical Rt	Version 2.0.5
Bestpractical Rt	Version 2.0.6
Bestpractical Rt	Version 2.0.7
Bestpractical Rt	Version 2.0.8.2
Bestpractical Rt	Version 2.0.8
Bestpractical Rt	Version 2.0.9
Bestpractical Rt	Version 3.0.0
Bestpractical Rt	Version 3.0.10
Bestpractical Rt	Version 3.0.11
Bestpractical Rt	Version 3.0.12
Bestpractical Rt	Version 3.0.1
Bestpractical Rt	Version 3.0.2
Bestpractical Rt	Version 3.0.3
Bestpractical Rt	Version 3.0.4
Bestpractical Rt	Version 3.0.5
Bestpractical Rt	Version 3.0.6
Bestpractical Rt	Version 3.0.7.1
Bestpractical Rt	Version 3.0.7
Bestpractical Rt	Version 3.0.8
Bestpractical Rt	Version 3.0.9
Bestpractical Rt	Version 3.2.0
Bestpractical Rt	Version 3.2.1
Bestpractical Rt	Version 3.2.2
Bestpractical Rt	Version 3.2.3
Bestpractical Rt	Version 3.4.0
Bestpractical Rt	Version 3.4.1
Bestpractical Rt	Version 3.4.2
Bestpractical Rt	Version 3.4.3
Bestpractical Rt	Version 3.4.4
Bestpractical Rt	Version 3.4.5
Bestpractical Rt	Version 3.4.6
Bestpractical Rt	Version 3.6.0
Bestpractical Rt	Version 3.6.1
Bestpractical Rt	Version 3.6.2
Bestpractical Rt	Version 3.6.3
Bestpractical Rt	Version 3.6.4
Bestpractical Rt	Version 3.6.5
Bestpractical Rt	Version 3.6.6
Bestpractical Rt	Version 3.6.7
Bestpractical Rt	Version 3.6.8
Bestpractical Rt	Version 3.6.9
Bestpractical Rt	Version 3.8.0
Bestpractical Rt	Version 3.8.1
Bestpractical Rt	Version 3.8.2
Bestpractical Rt	Version 3.8.3
Bestpractical Rt	Version 3.8.4
Bestpractical Rt	Version 3.8.5
Bestpractical Rt	Version 3.8.6
Bestpractical Rt	Version 3.8.6 rc1
Bestpractical Rt	Version 3.8.7 rc1
Bestpractical Rt	Version 3.8.8 rc2
Bestpractical Rt	Version 3.8.8 rc3
Bestpractical Rt	Version 3.8.8 rc4
Bestpractical Rt	Version 3.8.9 rc1
Bestpractical Rt	Version 3.8.9 rc2