tocsin

Debian/request-tracker4: unknown

Best Practical Solutions RT 3.x before 3.8.12 and 4.x before 4.0.6 does not properly disable groups, which allows remote authenticated users to bypass intended access restrictions in opportunistic cir

Action: Upgrade request-tracker4 to 4.0.5-3 or later.

Affected

introducedfixedlast affected
04.0.5-3-

Fixed versions

4.0.5-3

Sources

published · modified · JSON