Fluid Attacks Database

Description

Best Practical Request Tracker (RT) before 4.4.7 and 5.x before 5.0.5 allows Information Exposure in responses to mail-gateway REST API calls.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
debian 11	request-tracker4	=4.4.4+dfsg-2 \|\| =4.4.4+dfsg-2+deb11u1 \|\| =4.4.4+dfsg-2+deb11u2 \|\| >=0 <4.4.4+dfsg-2+deb11u3	4.4.4+dfsg-2+deb11u3
debian 12	request-tracker4	=4.4.6+dfsg-1.1 \|\| >=0 <4.4.6+dfsg-1.1+deb12u1	4.4.6+dfsg-1.1+deb12u1
debian 12	request-tracker5	=5.0.3+dfsg-2 \|\| =5.0.3+dfsg-3~deb12u1 \|\| >=0 <5.0.3+dfsg-3~deb12u2	5.0.3+dfsg-3~deb12u2
debian 13	request-tracker5	>=0 <5.0.5+dfsg-1	5.0.5+dfsg-1
debian 14	request-tracker5	>=0 <5.0.5+dfsg-1	5.0.5+dfsg-1

Aliases

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.