CVE-2015-1464

Published: Mar 9, 2015Modified: May 6, 2026

6.4

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Exploitability: 10.0 / Impact: 4.9

Source: NVD

Description

RT (aka Request Tracker) before 4.0.23 and 4.2.x before 4.2.10 allows remote attackers to hijack sessions via an RSS feed URL.

Products: Fedoraproject: Fedora · Bestpractical: Request Tracker

1 product

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 21
Fedoraproject Fedora	Version 22

Configuration B

11 vulnerable

Vulnerable Software	Affected Versions
Bestpractical Request Tracker	Up to 4.0.22
Bestpractical Request Tracker	Version 4.2.0
Bestpractical Request Tracker	Version 4.2.1
Bestpractical Request Tracker	Version 4.2.2
Bestpractical Request Tracker	Version 4.2.3
Bestpractical Request Tracker	Version 4.2.4
Bestpractical Request Tracker	Version 4.2.5
Bestpractical Request Tracker	Version 4.2.6
Bestpractical Request Tracker	Version 4.2.7
Bestpractical Request Tracker	Version 4.2.8
Bestpractical Request Tracker	Version 4.2.9