CVE-2012-6581
Best Practical Solutions RT 3.8.x before 3.8.15 and 4.0.x before 4.0.8, when GnuPG is enabled, allows remote attackers to bypass intended restrictions on reading keys in the product's keyring, and trigger outbound e-mail messages signed by an arbitrary stored secret key, by leveraging a UI e-mail signing privilege.
| Software | From | Fixed in |
|---|---|---|
| bestpractical / request_tracker | 3.8.7 | 3.8.7.x |
| bestpractical / request_tracker | 3.8.14 | 3.8.14.x |
| bestpractical / request_tracker | 3.8.9 | 3.8.9.x |
| bestpractical / request_tracker | 3.8.10 | 3.8.10.x |
| bestpractical / request_tracker | 3.8.13 | 3.8.13.x |
| bestpractical / request_tracker | 3.8.11 | 3.8.11.x |
| bestpractical / request_tracker | 3.8.12 | 3.8.12.x |
| bestpractical / request_tracker | 3.8.4 | 3.8.4.x |
| bestpractical / request_tracker | 3.8.3 | 3.8.3.x |
| bestpractical / request_tracker | 4.0.0 | 4.0.0.x |
| bestpractical / request_tracker | 4.0.6 | 4.0.6.x |
| bestpractical / request_tracker | 4.0.7 | 4.0.7.x |
| bestpractical / request_tracker | 4.0.5 | 4.0.5.x |
| bestpractical / request_tracker | 4.0.1 | 4.0.1.x |
| bestpractical / request_tracker | 4.0.2 | 4.0.2.x |
| bestpractical / request_tracker | 4.0.4 | 4.0.4.x |
| bestpractical / request_tracker | 4.0.3 | 4.0.3.x |
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime