Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Scrips_Overlay.pm in Best Practical Solutions RT before 3.8.9 does not properly restrict access to a TicketObj in a Scrip after a CurrentUser change, which allows remote authenticated users to obtain sensitive information via unspecified vectors, as demonstrated by custom-field value information, related to SQL logging.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Best Practical Solutions RT Scrips_Overlay.pm敏感信息泄露漏洞
Vulnerability Description
Best Practical Solutions RT 3.8.9之前版本中的Scrips_Overlay.pm在CurrentUser改变之后，没有正确限制对Script中的TicketObj的访问。远程认证用户可以借助未明向量获取敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A