CVE-2012-2770

Published: Aug 15, 2012Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The Authen::ExternalAuth extension before 0.11 for Best Practical Solutions RT allows remote attackers to obtain a logged-in session via unspecified vectors related to the "URL of a RSS feed of the user."

Affected (2)

Products: Mike Peachey: Authen\

Mike Peachey

1 product

Authen\

Configuration A

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mike Peachey Authen\	version ≤ 0.08
Mike Peachey Authen\	Version \ externalauth

Running on/with	Platform Versions
Bestpractical Rt	All versions

Related CWEs

CWE-264

References (8)

http://lists.bestpractical.com/pipermail/rt-announce/2012-July/000208.html

Source: cve@mitre.org

PatchVendor Advisory

http://secunia.com/advisories/50060

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/bid/54681

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/77213

Source: cve@mitre.org

http://lists.bestpractical.com/pipermail/rt-announce/2012-July/000208.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://secunia.com/advisories/50060

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securityfocus.com/bid/54681

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/77213

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.