CVE-2024-3262CWE-200

Information exposure vulnerability in Request Tracker (RT)

Medium · published April 4, 2024

CVSS v3.1
5.5
EPSS
0%
Percentile
19.9
In the wild
Unconfirmed
What it is

Information exposure vulnerability in RT software affecting version 4.4.1. This vulnerability allows an attacker with local access to the device to retrieve sensitive information about the application, such as vulnerability tickets, because the application stores the information in the browser cache, leading to information exposure despite session termination.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00285 · 19.9th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2024-04-04T09:21Z
EPSS history
Timeline
  • 04 APR 09:21Z
    Information exposure vulnerability in Request Tracker (RT)
    cvelistv5