CVE-2012-6578

Best Practical Solutions RT 3.8.x before 3.8.15 and 4.0.x before 4.0.8, when GnuPG is enabled with a "Sign by default" queue configuration, uses a queue's key…

published July 24, 2013

CVSS
—
EPSS
1%
Percentile
64.1
In the wild
Unconfirmed
What it is

Best Practical Solutions RT 3.8.x before 3.8.15 and 4.0.x before 4.0.8, when GnuPG is enabled with a "Sign by default" queue configuration, uses a queue's key for signing, which might allow remote attackers to spoof messages by leveraging the lack of authentication semantics.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01061 · 64.1th percentile
Published
2013-07-24T10:00Z
EPSS history
Timeline
  • 24 JUL 10:00Z
    Best Practical Solutions RT 3.8.x before 3.8.15 and 4.0.x before 4.0.8, when GnuPG is enabled with a "Sign by default" queue configuration, uses a queue's key…
    cvelistv5