CVE-2012-6578
Best Practical Solutions RT 3.8.x before 3.8.15 and 4.0.x before 4.0.8, when GnuPG is enabled with a "Sign by default" queue configuration, uses a queue's key for signing, which might allow remote attackers to spoof messages by leveraging the lack of authentication semantics.
| Software | From | Fixed in |
|---|---|---|
| bestpractical / request_tracker | 3.8.7 | 3.8.7.x |
| bestpractical / request_tracker | 3.8.14 | 3.8.14.x |
| bestpractical / request_tracker | 3.8.9 | 3.8.9.x |
| bestpractical / request_tracker | 3.8.10 | 3.8.10.x |
| bestpractical / request_tracker | 3.8.13 | 3.8.13.x |
| bestpractical / request_tracker | 3.8.11 | 3.8.11.x |
| bestpractical / request_tracker | 3.8.12 | 3.8.12.x |
| bestpractical / request_tracker | 3.8.4 | 3.8.4.x |
| bestpractical / request_tracker | 3.8.3 | 3.8.3.x |
| bestpractical / request_tracker | 4.0.0 | 4.0.0.x |
| bestpractical / request_tracker | 4.0.6 | 4.0.6.x |
| bestpractical / request_tracker | 4.0.7 | 4.0.7.x |
| bestpractical / request_tracker | 4.0.5 | 4.0.5.x |
| bestpractical / request_tracker | 4.0.1 | 4.0.1.x |
| bestpractical / request_tracker | 4.0.2 | 4.0.2.x |
| bestpractical / request_tracker | 4.0.4 | 4.0.4.x |
| bestpractical / request_tracker | 4.0.3 | 4.0.3.x |
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime