RT REST API Privilege Escalation and Information Disclosure (GHSA-7rx2-x357-wv74)

Vulnerability Overview Vulnerability Name: Privilege escalation and information disclosure via REST 2.0 user collection endpoint Vulnerability ID: GHSA-7rx2-x357-wv74 Release Date: May 21, 2023 Severity: Critical (9.1/10) Affected Versions Affected Versions: - = 6.0.0, < 6.0.3 Fixed Versions: - 5.0.10 - 6.0.3 Vulnerability Description Impact: - There is an information disclosure and privilege escalation vulnerability in RT's REST 2.0 API. - Privileged (non-administrator) users can obtain authentication credentials for other users, including users with administrator privileges. - Using these credentials allows reading data, such as other users' RT feed endpoints. - The same request also exposes credentials and invalidates them, thereby breaking previously distributed feed URLs. Remediation Patch: - Users should upgrade to RT 5.0.10 or 6.0.3. Workarounds Workarounds: - Sites that are not actively using the REST 2.0 user endpoint or RSS/ical feed endpoints can block them at the web server level before the patch is applied. - For Apache, the following configuration can be used: Apache 2.4+ for 2.2: Use . References Reference Links: - OWASP: Broken Access Control Additional Information CVSS v3 Base Metrics: - Attack Vector: Network - Attack Complexity: Low - Privileges Required: Low - User Interaction: None - Scope: Changed - Confidentiality: High - Integrity: Low - Availability: Low CVE ID: CVE-2026-44231 Weaknesses: - CWE-200 - CWE-269 - CWE-863 Credit: - jeroengul

Goal Reached Thanks to every supporter — we hit 100%!

RT REST API Privilege Escalation and Information Disclosure (GHSA-7rx2-x357-wv74)

More from this source