Request Tracker
Approved changes feed: RSS · Atom
cpe:2.3:a:best_practical_solutions:request_tracker:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Best Practical Solutions (b5c267ec-8fe9-59ad-8a95-673a21514874) |
|---|---|
| Product | Request Tracker (b7bd6504-d7da-50c9-a93a-3ebba376cfcc) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/request-tracker4 |
purl2cpe | 2026-06-01 10:16:29.968845 |
pkg:deb/ubuntu/request-tracker4 |
purl2cpe | 2026-06-01 10:16:29.968848 |
pkg:github/bestpractical/rt |
purl2cpe | 2026-06-01 10:16:29.968851 |
pkg:rpm/opensuse/request-tracker |
purl2cpe | 2026-06-01 10:16:29.968854 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-2545 |
vulnerable | 2026-06-08 07:16:57.399360 |
Deprecated 3DES cryptographic algorithm used by Request Tracker in emails encrypted with S/MIME
Vulnerability in Best Practical Solutions, LLC's Request Tracker prior to v5.0.8, where the Triple DES (3DES) cryptographic algorithm is used to protect emails sent with S/MIME encryption. Triple DES is considered obsolete and insecure due to its susceptibility to birthday attacks, which could compromise the confidentiality of encrypted messages.
Published: 2025-05-05T11:28:43.668Z
Updated: 2025-11-03T19:45:04.026Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-3262 |
vulnerable | 2026-06-08 06:41:52.790952 |
Information exposure vulnerability in Request Tracker (RT)
MEDIUM (5.5)
Information exposure vulnerability in RT software affecting version 4.4.1. This vulnerability allows an attacker with local access to the device to retrieve sensitive information about the application, such as vulnerability tickets, because the application stores the information in the browser cache, leading to information exposure despite session termination.
Published: 2024-04-04T09:21:34.682Z
Updated: 2025-11-03T19:29:47.007Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-41260 |
vulnerable | 2026-06-08 06:11:05.680934 |
Details available
Best Practical Request Tracker (RT) before 4.4.7 and 5.x before 5.0.5 allows Information Exposure in responses to mail-gateway REST API calls.
Published: 2023-11-03T00:00:00.000Z
Updated: 2025-11-04T19:21:06.955Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-41259 |
vulnerable | 2026-06-08 06:11:05.678939 |
Details available
Best Practical Request Tracker (RT) before 4.4.7 and 5.x before 5.0.5 allows Information Disclosure via fake or spoofed RT email headers in an email message or a mail-gateway REST API call.
Published: 2023-11-03T00:00:00.000Z
Updated: 2025-11-04T19:21:05.839Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.