Multiple cross-site scripting (XSS) vulnerabilities in Request Tracker (RT) 4.x before 4.2.12 allow remote attackers to inject arbitrary web script or HTML via vectors related to the (1) user and (2) group rights management pages.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Multiple cross-site scripting (XSS) vulnerabilities in Request Tracker (RT) 4.x before 4.2.12 allow remote
    attackers to inject arbitrary web script or HTML via vectors related to the (1) user and (2) group rights
    management pages. (CVE-2015-5475)

Security fix for CVE-2015-5475

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

It was discovered that Request Tracker, an extensible trouble-ticket tracking system is susceptible to a cross-site scripting attack via the user and group rights management pages (CVE-2015-5475 ) and via the cryptography interface, allowing an attacker with a carefully-crafted key to inject JavaScript into RT's user interface.
Installations which use neither GnuPG nor S/MIME are unaffected by the second cross-site scripting vulnerability.

Best Practical reports :

RT 4.0.0 and above are vulnerable to a cross-site scripting (XSS) attack via the user and group rights management pages. This vulnerability is assigned CVE-2015-5475. It was discovered and reported by Marcin Kopec at Data Reliance Shared Service Center.

RT 4.2.0 and above are vulnerable to a cross-site scripting (XSS) attack via the cryptography interface. This vulnerability could allow an attacker with a carefully-crafted key to inject JavaScript into RT's user interface. Installations which use neither GnuPG nor S/MIME are unaffected.

ID	Name	Product	Family	Severity
401126	Alpine: rt4: security update to 4.2.11-r0 (deprecated)	Tenable Cloud Security	Alpine Linux Local Security Checks	medium
401126	Alpine: rt4: security update to 4.2.11-r0 (deprecated)	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	medium
85672	Fedora 22 : rt-4.2.12-1.fc22 (2015-13718)	Nessus	Fedora Local Security Checks	medium
85671	Fedora 21 : rt-4.2.12-1.fc21 (2015-13664)	Nessus	Fedora Local Security Checks	medium
85638	Fedora 23 : rt-4.2.12-1.fc23 (2015-13641)	Nessus	Fedora Local Security Checks	medium
85388	Debian DSA-3335-1 : request-tracker4 - security update	Nessus	Debian Local Security Checks	medium
85368	FreeBSD : RT -- two XSS vulnerabilities (83b38a2c-413e-11e5-bfcf-6805ca0b3d42)	Nessus	FreeBSD Local Security Checks	medium

Detections

Analytics

CVE-2015-5475

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium