CVE-2015-1464 – RT (aka Request Tracker) before 4.0.23 and 4.2.x before 4.2.10 allows rem

RT (aka Request Tracker) before 4.0.23 and 4.2.x before 4.2.10 allows remote attackers to hijack sessions via an RSS feed URL.

 

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1464

Reference (s):

• http://blog.bestpractical.com/2015/02/security-vulnerabilities-in-rt.html
• DEBIAN:DSA-3176
• URL: http://www.debian.org/security/2015/dsa-3176
• FEDORA:FEDORA-2015-4666
• URL: http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154213.html