Executive Summary
| Informations | |||
|---|---|---|---|
| Name | CVE-2011-4459 | First vendor Publication | 2012-06-04 |
| Vendor | Cve | Last vendor Modification | 2024-11-21 |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:M/Au:S/C:N/I:P/A:N) | |||
|---|---|---|---|
| Cvss Base Score | 3.5 | Attack Range | Network |
| Cvss Impact Score | 2.9 | Attack Complexity | Medium |
| Cvss Expoit Score | 6.8 | Authentication | Requires single instance |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| Best Practical Solutions RT 3.x before 3.8.12 and 4.x before 4.0.6 does not properly disable groups, which allows remote authenticated users to bypass intended access restrictions in opportunistic circumstances by leveraging a group membership. |
Original Source
| Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4459 |
CWE : Common Weakness Enumeration
| % | Id | Name |
|---|---|---|
| 100 % | CWE-264 | Permissions, Privileges, and Access Controls |
CPE : Common Platform Enumeration
OpenVAS Exploits
| Date | Description |
|---|---|
| 2012-08-30 | Name : Fedora Update for rt3 FEDORA-2012-8290 File : nvt/gb_fedora_2012_8290_rt3_fc17.nasl |
| 2012-06-04 | Name : Fedora Update for rt3 FEDORA-2012-8339 File : nvt/gb_fedora_2012_8339_rt3_fc15.nasl |
| 2012-06-04 | Name : Fedora Update for rt3 FEDORA-2012-8363 File : nvt/gb_fedora_2012_8363_rt3_fc16.nasl |
| 2012-05-31 | Name : Debian Security Advisory DSA 2480-1 (request-tracker3.8) File : nvt/deb_2480_1.nasl |
| 2012-05-31 | Name : FreeBSD Ports: rt40 File : nvt/freebsd_rt40.nasl |
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2012-08-06 | Name : The remote web server is running a Perl application that is affected by multi... File : rt_3_8_12_or_4_0_6.nasl - Type : ACT_GATHER_INFO |
| 2012-06-29 | Name : The remote Debian host is missing a security-related update. File : debian_DSA-2480.nasl - Type : ACT_GATHER_INFO |
| 2012-05-29 | Name : The remote FreeBSD host is missing one or more security-related updates. File : freebsd_pkg_e0a969e4a51211e190b4e0cb4e266481.nasl - Type : ACT_GATHER_INFO |
Sources (Detail)
Alert History
| Date | Informations |
|---|---|
| 2024-11-28 23:01:45 |
|
| 2024-11-28 12:27:50 |
|
| 2021-05-04 12:17:53 |
|
| 2021-04-22 01:21:11 |
|
| 2020-05-23 00:32:14 |
|
| 2016-04-26 21:14:31 |
|
| 2014-02-17 11:06:19 |
|
| 2013-05-10 23:10:54 |
|
