LWN.net Logo

perl-RT-Authen-ExternalAuth: privilege escalation

Package(s):perl-RT-Authen-ExternalAuth CVE #(s):CVE-2012-2770
Created:August 10, 2012 Updated:August 15, 2012
Description:

From the Red Hat advisory:

RT::Authen::ExternalAuth 0.10 and below (for all versions of RT) are vulnerable to an escalation of privilege attack where the URL of a RSS feed of the user can be used to acquire a fully logged-in session as that user.

Alerts:
Fedora FEDORA-2012-11360 2012-08-09
Fedora FEDORA-2012-11337 2012-08-09

(Log in to post comments)

Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds