CVE-2021-38562

Best Practical Request Tracker (RT) 4.2 before 4.2.17, 4.4 before 4.4.5, and 5.0 before 5.0.2 allows sensitive information disclosure via a timing attack…

published October 18, 2021

CVSS
—
EPSS
2%
Percentile
78.8
In the wild
Unconfirmed
What it is

Best Practical Request Tracker (RT) 4.2 before 4.2.17, 4.4 before 4.4.5, and 5.0 before 5.0.2 allows sensitive information disclosure via a timing attack against lib/RT/REST2/Middleware/Auth.pm.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01835 · 78.8th percentile
Published
2021-10-18T08:52Z
EPSS history
Timeline
  • 18 OCT 08:52Z
    Best Practical Request Tracker (RT) 4.2 before 4.2.17, 4.4 before 4.4.5, and 5.0 before 5.0.2 allows sensitive information disclosure via a timing attack…
    cvelistv5