cpe:/a:bestpractical:rt:3.6.0 cpe:/a:bestpractical:rt:3.6.1 cpe:/a:bestpractical:rt:3.6.2 cpe:/a:bestpractical:rt:3.6.3 cpe:/a:bestpractical:rt:3.6.4 cpe:/a:bestpractical:rt:3.6.5 cpe:/a:bestpractical:rt:3.6.6 cpe:/a:bestpractical:rt:3.6.7 cpe:/a:bestpractical:rt:3.6.8 cpe:/a:bestpractical:rt:3.6.9 cpe:/a:bestpractical:rt:3.6.10 cpe:/a:bestpractical:rt:3.8.0 cpe:/a:bestpractical:rt:3.8.1 cpe:/a:bestpractical:rt:3.8.2 cpe:/a:bestpractical:rt:3.8.3 cpe:/a:bestpractical:rt:3.8.4 cpe:/a:bestpractical:rt:3.8.5 cpe:/a:bestpractical:rt:3.8.6 cpe:/a:bestpractical:rt:3.8.6:rc1 cpe:/a:bestpractical:rt:3.8.7 cpe:/a:bestpractical:rt:3.8.7:rc1 cpe:/a:bestpractical:rt:3.8.8 cpe:/a:bestpractical:rt:3.8.8:rc2 cpe:/a:bestpractical:rt:3.8.8:rc3 cpe:/a:bestpractical:rt:3.8.8:rc4 CVE-2011-1690 2011-04-22T06:55:02.530-04:00 2017-08-16T21:34:19.777-04:00 4.3 NETWORK MEDIUM NONE NONE PARTIAL NONE http://nvd.nist.gov 2011-04-22T11:01:00.000-04:00 SECUNIA 44189 BID 47383 VUPEN ADV-2011-1071 DEBIAN DSA-2220 MLIST [rt-announce] 20110414 RT 3.6.11 Released - Security Release MLIST [rt-announce] 20110414 RT 3.8.10 Released - Security Release MLIST [rt-announce] 20110414 Security vulnerabilities in RT CONFIRM http://blog.bestpractical.com/2011/04/security-vulnerabilities-in-rt.html CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=696795 XF rt-unspecified-sec-bypass(66794) Best Practical Solutions RT 3.6.0 through 3.6.10 and 3.8.0 through 3.8.8 allows remote attackers to trick users into sending credentials to an arbitrary server via unspecified vectors.