Best Practical Solutions RT 3.x before 3.8.12 and 4.x before 4.0.6 does not properly disable groups, which allows remote authenticated users to bypass intended access restrictions in opportunistic circumstances by leveraging a group membership.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Information
Published : 2012-06-04 12:55
Updated : 2012-09-28 20:13
NVD link : CVE-2011-4459
Mitre link : CVE-2011-4459
JSON object : View
CWE
CWE-264
Permissions, Privileges, and Access Controls
Products Affected
bestpractical
- rt