← Back

CVE-2011-4459

nvd nist
Published: Jun 4, 2012Modified: Apr 29, 2026

JSON object

Loading...
3.5
Vector
AV:N/AC:M/Au:S/C:N/I:P/A:N
Exploitability: 6.8 / Impact: 2.9
Source: NVD

Description

Best Practical Solutions RT 3.x before 3.8.12 and 4.x before 4.0.6 does not properly disable groups, which allows remote authenticated users to bypass intended access restrictions in opportunistic circumstances by leveraging a group membership.

Affected (170)

Products: Bestpractical: Rt
1 product
Rt
Configuration A
155 vulnerable
Vulnerable SoftwareAffected Versions
Bestpractical
Version 3.0.0
Version 3.0.10
Version 3.0.10 pre1
Version 3.0.10 pre2
Version 3.0.10 rc1
Version 3.0.11
Version 3.0.11 rc2
Version 3.0.11 rc3
Version 3.0.11 rc4
Version 3.0.12
Version 3.0.1
Version 3.0.2
Version 3.0.3
Version 3.0.4
Version 3.0.5
Version 3.0.6
Version 3.0.7.1
Version 3.0.7
Version 3.0.8
Version 3.0.9
Version 3.1.10
Version 3.1.11
Version 3.1.12
Version 3.1.13
Version 3.1.14
Version 3.1.15
Version 3.1.16
Version 3.1.17
Version 3.1.2
Version 3.1.3
Version 3.1.4
Version 3.1.5
Version 3.1.6
Version 3.1.7
Version 3.1.8
Version 3.2.0
Version 3.2.0 rc1
Version 3.2.0 rc2
Version 3.2.0 rc3
Version 3.2.0 rc4
Version 3.2.1
Version 3.2.1 rc1
Version 3.2.1 rc2
Version 3.2.1 rc3
Version 3.2.1 rc4
Version 3.2.2
Version 3.2.2 rc1
Version 3.2.3
Version 3.2.3 rc1
Version 3.2.3 rc2
Version 3.4.0
Version 3.4.0 rc1
Version 3.4.0 rc2
Version 3.4.0 rc3
Version 3.4.0 rc4
Version 3.4.0 rc5
Version 3.4.0 rc6
Version 3.4.1
Version 3.4.2
Version 3.4.2 rc1
Version 3.4.2 rc2
Version 3.4.3
Version 3.4.3 rc1
Version 3.4.3 rc2
Version 3.4.4
Version 3.4.4 pre1
Version 3.4.4 pre2
Version 3.4.4 pre3
Version 3.4.5
Version 3.4.5 pre1
Version 3.4.5 rc1
Version 3.4.5 rc2
Version 3.4.6
Version 3.4.6 rc1
Version 3.4.6 rc2
Version 3.4.7 rc1
Version 3.5.1
Version 3.5.2
Version 3.5.3
Version 3.5.4
Version 3.5.5
Version 3.5.6
Version 3.5.7
Version 3.6.0
Version 3.6.0 pre0
Version 3.6.0 pre1
Version 3.6.0 rc1
Version 3.6.0 rc2
Version 3.6.0 rc3
Version 3.6.10
Version 3.6.1
Version 3.6.1 pre2
Version 3.6.1 rc1
Version 3.6.1 rc2
Version 3.6.2
Version 3.6.2 rc1
Version 3.6.2 rc3
Version 3.6.2 rc4
Version 3.6.2 rc5
Version 3.6.3
Version 3.6.3 rc1
Version 3.6.3 rc2
Version 3.6.3 rc3
Version 3.6.3 rc4
Version 3.6.4
Version 3.6.4 rc1
Version 3.6.4 rc2
Version 3.6.5
Version 3.6.5 rc1
Version 3.6.5 rc2
Version 3.6.6
Version 3.6.6 rc1
Version 3.6.6 rc2
Version 3.6.6 rc3
Version 3.6.7
Version 3.6.8
Version 3.6.9
Version 3.7.1
Version 3.7.5
Version 3.7.80
Version 3.7.85
Version 3.7.86
Version 3.8.0
Version 3.8.0 rc1
Version 3.8.0 rc2
Version 3.8.0 rc3
Version 3.8.10
Version 3.8.11
Version 3.8.1
Version 3.8.1 rc1
Version 3.8.1 rc2
Version 3.8.1 rc3
Version 3.8.1 rc4
Version 3.8.1 rc5
Version 3.8.2
Version 3.8.2 rc1
Version 3.8.2 rc2
Version 3.8.3
Version 3.8.3 rc1
Version 3.8.3 rc2
Version 3.8.4
Version 3.8.4 rc1
Version 3.8.5
Version 3.8.6
Version 3.8.6 rc1
Version 3.8.7
Version 3.8.7 rc1
Version 3.8.8
Version 3.8.8 rc2
Version 3.8.8 rc3
Version 3.8.8 rc4
Version 3.8.9
Version 3.8.9 rc1
Version 3.8.9 rc2
Version 3.8.9 rc3
Configuration B
15 vulnerable
Vulnerable SoftwareAffected Versions
Bestpractical
Version 3.8.12
Version 4.0.0
Version 4.0.0 rc1
Version 4.0.0 rc2
Version 4.0.0 rc3
Version 4.0.0 rc4
Version 4.0.0 rc5
Version 4.0.0 rc6
Version 4.0.0 rc7
Version 4.0.0 rc8
Version 4.0.1
Version 4.0.2
Version 4.0.3
Version 4.0.4
Version 4.0.5

Related CWEs

References (10)

Timeline

No history available yet.