CVE-2013-3737

Published: Nov 16, 2014Modified: May 6, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The MobileUI (aka RT-Extension-MobileUI) extension before 1.04 in Request Tracker (RT) 4.0.0 before 4.0.13, when using the file-based session store (Apache::Session::File) and certain authentication extensions, allows remote attackers to reuse unauthorized sessions and obtain user preferences and caches via unspecified vectors.

Affected (13)

Products: Bestpractical: Request Tracker

Bestpractical

1 product

Request Tracker

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Bestpractical Request Tracker	Version 4.0.0
Bestpractical Request Tracker	Version 4.0.10
Bestpractical Request Tracker	Version 4.0.11
Bestpractical Request Tracker	Version 4.0.12
Bestpractical Request Tracker	Version 4.0.1
Bestpractical Request Tracker	Version 4.0.2
Bestpractical Request Tracker	Version 4.0.3
Bestpractical Request Tracker	Version 4.0.4
Bestpractical Request Tracker	Version 4.0.5
Bestpractical Request Tracker	Version 4.0.6
Bestpractical Request Tracker	Version 4.0.7
Bestpractical Request Tracker	Version 4.0.8
Bestpractical Request Tracker	Version 4.0.9