CVE-2012-4733

Published: Aug 23, 2013Modified: Apr 29, 2026

6.0

Vector

AV:N/AC:M/Au:S/C:P/I:P/A:P

Exploitability: 6.8 / Impact: 6.4

Source: NVD

Description

Request Tracker (RT) 4.x before 4.0.13 does not properly enforce the DeleteTicket and "custom lifecycle transition" permission, which allows remote authenticated users with the ModifyTicket permission to delete tickets via unspecified vectors.

Affected (19)

Products: Bestpractical: Rt

Bestpractical

1 product

Configuration A

19 vulnerable

Vulnerable Software	Affected Versions
Bestpractical Rt	Version 4.0.0
Bestpractical Rt	Version 4.0.0 rc1
Bestpractical Rt	Version 4.0.0 rc2
Bestpractical Rt	Version 4.0.0 rc3
Bestpractical Rt	Version 4.0.0 rc4
Bestpractical Rt	Version 4.0.0 rc5
Bestpractical Rt	Version 4.0.0 rc6
Bestpractical Rt	Version 4.0.0 rc7
Bestpractical Rt	Version 4.0.0 rc8
Bestpractical Rt	Version 4.0.10
Bestpractical Rt	Version 4.0.11
Bestpractical Rt	Version 4.0.12
Bestpractical Rt	Version 4.0.1
Bestpractical Rt	Version 4.0.1 rc1
Bestpractical Rt	Version 4.0.1 rc2
Bestpractical Rt	Version 4.0.2
Bestpractical Rt	Version 4.0.2 rc1
Bestpractical Rt	Version 4.0.2 rc2
Bestpractical Rt	Version 4.0.3